Privacy Policy — ntc22

Introduction

ntc22 ("we", "us", "our", "the Platform", "the Operator") is committed to protecting the privacy and personal data of all individuals who access or use the ntc22 website and associated services at https://ntc22.click (the "Site"). This Privacy Policy ("Policy") has been prepared in accordance with applicable data protection principles and describes in detail how we collect, use, store, share, and safeguard your personal information.

By registering an account, accessing the Site, or submitting any personal information to ntc22, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Site immediately.

Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies or can reasonably be used to identify a living individual, directly or indirectly. This includes names, identification numbers, location data, email addresses, and online identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means ntc22, the entity that determines the purposes and means of processing Personal Data collected through the Site.
• "Data Processor" means any third-party service provider that processes Personal Data on behalf of ntc22 under a contractual arrangement.
• "User" means any individual who accesses, browses, registers on, or uses the ntc22 Platform, whether or not a financial transaction is made.
• "KYC Data" means identity and address verification documents collected for Know Your Customer compliance purposes, including government-issued photo ID, proof of address, and payment method documentation.
• "Cookies" means small data files placed on a user's device by the Site to facilitate session management, analytics, and personalisation.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement by which a User signifies acceptance of the processing of their Personal Data for a stated purpose.

Data We Collect

ntc22 collects Personal Data across several categories depending on how you interact with the Platform. The categories of data we may collect include:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the minimum age requirement of 21 years).
• Gender (optional, collected during certain promotional activities).
• Username chosen at registration.
• Profile photograph (where voluntarily submitted for account personalisation).

3.2 Contact Data

• Email address (primary contact and account communication channel).
• Mobile phone number (used for two-factor authentication and security alerts).
• Residential address, including city, state, and postcode (e.g., Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru, Shah Alam).

3.3 Financial & Payment Data

• Bank account details (for FPX and DuitNow transactions via Maybank, CIMB, Public Bank, Hong Leong, and other approved institutions).
• eWallet identifiers (for Touch 'n Go eWallet, Boost, and GrabPay transactions).
• Transaction history, including deposit amounts, withdrawal requests, and timestamps.
• Note: ntc22 does not store full card numbers. Payment processing is handled by certified third-party payment gateways.

3.4 Identity Verification (KYC) Data

• Copy of government-issued photo identification (MyKad, passport, or driving licence).
• Proof of residential address (utility bill or bank statement, dated within 90 days).
• Proof of payment method ownership where required.

3.5 Usage & Technical Data

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser information.
• Pages visited, features accessed, session duration, and navigation patterns within the Site.
• Bet history, game activity logs, and wagering records.
• Log-in timestamps and authentication records.

3.6 Communications Data

• Records of live chat conversations with our support team.
• Email correspondence sent to or received from ntc22's support address.
• Survey responses and feedback submitted voluntarily by Users.

How We Collect Your Data

ntc22 collects Personal Data through the following methods:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the Site, via server logs, cookies, pixel tags, and analytics tools.
• Payment processors: Transaction and payment method confirmation data received from our certified third-party payment service providers (including FPX, DuitNow, and eWallet operators).
• Third-party identity verification: Identity confirmation data returned by KYC verification service providers where we engage them to assist with document authentication.
• Fraud detection tools: Device fingerprinting and behavioural analytics tools that help us identify suspicious or fraudulent activity on the Platform.

Purposes of Data Processing

ntc22 processes your Personal Data for the following purposes:

Legal Basis for Processing

ntc22 processes Personal Data one or more of the following legal bases depending on the specific activity:

• Contractual necessity: Processing required to perform the contract between ntc22 and the User — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable regulatory requirements, including anti-money laundering (AML) obligations and Know Your Customer (KYC) mandates.
• Legitimate interests: Processing carried out for purposes of fraud prevention, platform security, responsible gambling monitoring, and service improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing and promotional communications, where you have provided explicit consent. You may withdraw your consent at any time by contacting our support team or adjusting your notification preferences within your account settings.

Data Retention

ntc22 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our general retention periods are as follows:

• Active account data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with AML and financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of verification or account closure (whichever is later).
• Transaction records: Retained for a minimum of seven (7) years to satisfy financial regulatory obligations.
• Support and communications records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable additional period for compliance purposes.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be associated with any individual.

Data Sharing & Disclosure

ntc22 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may disclose your Personal Data to the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers: FPX gateway operators, DuitNow infrastructure providers, and eWallet operators (Touch 'n Go, Boost, GrabPay) — solely to process your financial transactions.
• Banking institutions: Maybank, CIMB, Public Bank, Hong Leong, and other participating banks — to facilitate deposit and withdrawal instructions.
• KYC and identity verification providers: Third-party services engaged to assist with document authentication and age verification.
• Game content providers: Licensed third-party game studios and live casino operators who deliver gaming content through the ntc22 platform. These providers may collect limited technical data for game integrity purposes.
• IT and platform infrastructure providers: Cloud hosting, security, and analytics service providers operating under data processing agreements with ntc22.
• Regulatory and law enforcement authorities: Where required by law, court order, or regulatory authority, ntc22 may disclose Personal Data to comply with legal obligations or to assist in the investigation of financial crime, fraud, or other illegal activity.

All third-party Data Processors engaged by ntc22 are bound by contractual obligations to process Personal Data only on our documented instructions, to implement appropriate security measures, and to keep data confidential.

Cookies & Tracking Technologies

ntc22 uses cookies and similar tracking technologies to operate and improve the Site, maintain your session, and gather anonymised analytics. The categories of cookies used on the Platform are:

• Strictly Necessary Cookies: Required for the Site to function. These include session cookies that maintain your logged-in state and security tokens. These cookies cannot be disabled.
• Performance & Analytics Cookies: Used to collect anonymised data about how users navigate the Site — including pages visited and time spent — to help us improve the platform experience.
• Functional Cookies: Remember your preferences such as language settings, preferred currency display, and notification preferences to provide a more personalised experience.
• Security Cookies: Used as part of our fraud detection and account protection systems to identify suspicious access patterns or unusual device behaviour.

You may control non-essential cookies via your browser settings. Please note that disabling certain cookies may affect the functionality of the Site, including your ability to maintain logged-in session. ntc22 does not currently use third-party advertising cookies.

Data Security

ntc22 implements a comprehensive range of technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ntc22 servers — the same standard used by Malaysian internet banking portals including Maybank2u and CIMB Clicks.
• Encrypted storage of all sensitive account and identity data at rest, using industry-standard encryption algorithms.
• Two-factor authentication (2FA) available for all accounts to prevent unauthorised login attempts.
• Continuous security monitoring of the platform infrastructure for intrusion attempts, anomalous access patterns, and potential data breaches.
• Access controls that restrict access to Personal Data to authorised personnel on a need-to-know basis.
• Regular security audits and penetration testing of platform infrastructure conducted by qualified security professionals.

While ntc22 employs robust security measures, no system is entirely immune to risk. In the event of a data breach that poses a material risk to Users, we will notify affected individuals as promptly as practicable and take immediate remedial action.

Your Rights as a Data Subject

Subject to applicable data protection law, you have the following rights in respect of your Personal Data held by ntc22:

• Right of Access: You may request a copy of the Personal Data ntc22 holds about you, along with information about how it is processed.
• Right to Rectification: You may request the correction of any inaccurate or incomplete Personal Data held your account.
• Right to Erasure: In certain circumstances, you may request the deletion of your Personal Data. This right is subject to ntc22's legal obligations to retain data for compliance and regulatory purposes as described in Section 7.
• Right to Restrict Processing: You may request that we limit the processing of your Personal Data in certain circumstances — for example, where you contest its accuracy.
• Right to Data Portability: You may request a structured, machine-readable copy of Personal Data you have provided to ntc22 for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, or to processing for direct marketing purposes. Where you object to marketing, we will cease such communications promptly.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our support team via live chat or by email at [email protected]. We will respond to all valid requests within a reasonable timeframe, typically within 30 days. We may require identity verification before fulfilling a data access or erasure request to ensure data is not disclosed to an unauthorised party.

Children & Minors

The ntc22 Platform is strictly intended for adults aged21 years and above. We do not knowingly collect Personal Data from any individual under the age of 21. If you are under 21, you are not permitted to access or use the Platform, create an account, or submit any Personal Data to ntc22.

If ntc22 becomes aware that Personal Data has been collected from an individual under the age of 21 without appropriate verification, we will take immediate steps to delete the relevant data and close the associated account. Any winings or balances on an account found to belong to a minor are subject to forfeiture.

Parents or guardians who believe a minor may have accessed the Platform using their personal details or payment methods should contact our support team immediately at [email protected].

Third-Party Services

The ntc22 Platform may incorporate third-party service components, such as licensed game content from external studios, live streaming infrastructure, and payment processing APIs. These third-party services operate under their own privacy policies and data handling practices, which are separate from this Policy.

ntc22 takes reasonable steps to ensure that all third-party processors engaged by the Platform provide adequate data protection guarantees through contractual data processing agreements. However, ntc22 is not responsible for the independent data practices of external service providers beyond what is governed by those agreements.

The Site does not contain links to external websites. All navigation on the ntc22 Platform remains within the Site's own domain.

Policy Amendments

ntc22 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will notify active Users via email or a prominent notice on the Site prior to the changes taking effect.

The effective date at the top of this page will always reflect the date of the most recent revision. Your continued use of the Platform following the publication of any amendment constitutes your acknowledgement and acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how we handle your personal information.

Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your Personal Data by ntc22, please contact us through any of the following channels:

• Live Chat: Available24/7 on the ntc22 Platform. Our support team operates in English, Bahasa Melayu, and Mandarin, with an average first response time under 5 minutes.
• Email: [email protected] — please include "Privacy Request" in your subject line for faster routing. Average email response time is within 12 hours.
• FAQ: Visit ourFAQ page for answers to common questions about accounts, payments, data and security.