Texas Poker Malaysia Privacy Policy – Player Data Protection

Texas Poker collects your personal data through several means when you use our platform. The following are the main categories of information we collect:

Information you provide directly:

• Account Registration: Your full name, date of birth, MyKad or passport number, email address, mobile number, and Malaysian residential address.
• Identity Verification (KYC): Copies of identity documents, proof of address, and other supporting documents required to comply with anti-money laundering (AML) legal requirements.
• Payment Information: eWallet account details (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay) or FPX bank account details (Maybank2u, CIMB Clicks) that you use for deposits and withdrawals. We do not store your eWallet PIN or password.
• Communications: Records of customer support conversations, emails you have sent to us, and feedback you have provided.

Information collected automatically:

• Technical Data: IP address, browser type and version, device operating system, screen resolution, and unique device identifiers.
• Usage Data: Pages you visit within the platform, session duration, actions you take, and general navigation patterns.
• Cookie Data: Information collected through cookies and similar tracking technologies – explained further in section 5 below.
• Location Data: General location based on your IP address, for the purpose of verifying that you are in Malaysia and to comply with regional restrictions where applicable.

Texas Poker does not collect special category data such as medical information, political views, religious affiliations, or biometric data, unless specifically required for identity verification purposes and only with your explicit consent.

Texas Poker uses the personal data collected for the following purposes, and those purposes only:

• Account Management: Creating and managing your player account, processing registrations, verifying your identity, and enabling secure access to the Texas Poker platform.
• Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, ShopeePay, and Boost, as well as managing withdrawals to your account.
• Legal Compliance: Fulfilling legal obligations including Anti-Money Laundering (AML) requirements, customer identity verification (KYC), and reporting to the relevant authorities in accordance with Malaysian law.
• Security & Fraud Prevention: Detecting and preventing fraud, multi-account usage, bonus abuse, and any activity that violates Texas Poker's Terms & Conditions.
• Customer Support: Responding to enquiries, resolving complaints, and providing technical assistance to players.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to players who may need assistance.
• Platform Improvements: Analysing usage data (in aggregated, non-identifiable form) to understand how players use Texas Poker and to make meaningful improvements.
• Service Communications: Sending important notifications about your account, transactions, changes to terms, and security information.

We will not use your data for any purpose other than those stated above without first obtaining your consent.

Texas Poker does not sell your personal data. However, in the following limited circumstances, we may need to share your data with trusted third parties:

• Payment Providers: Information required to process transactions is shared with the relevant Malaysian eWallet and banking providers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX). These providers are subject to their own privacy policies and have legal obligations to protect your data.
• Technical Service Providers: Companies that help us operate the platform, including server hosting, cybersecurity, and analytics services. All such providers are bound by strict data protection agreements and may only use your data for the purposes we specify.
• Legal Authorities: When required by Malaysian law, court order, or a lawful request from law enforcement authorities – including the Malaysian Anti-Corruption Commission (MACC) or the Financial Intelligence Unit (FIU) where relevant to AML investigations.
• Business Transfers: In the event of a merger, acquisition, or sale of Texas Poker's assets, player data may be transferred to the successor entity subject to equivalent or greater privacy protections.

Texas Poker implements comprehensive technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction, or disclosure:

• Encryption In Transit: All communications between your device and the Texas Poker platform are protected by 256-bit SSL/TLS encryption – no data is transmitted in plain text.
• Encryption At Rest: Sensitive data, including identity information and payment details, is stored in encrypted form within our databases.
• Access Control: Access to player data is restricted to Texas Poker staff who require it to carry out their duties. Access is controlled through a role-based access control system, and every instance of access is automatically logged.
• 24/7 Security Monitoring: Security monitoring systems operate around the clock to detect and respond to any threats or suspicious activity.
• Regular Security Audits: Texas Poker conducts regular security audits and penetration testing to identify and address system vulnerabilities before they can be exploited.
• Staff Training: All Texas Poker staff with access to player data undergo comprehensive data protection training and are bound by strict confidentiality agreements.

While we take all reasonable steps to protect your data, no security system is entirely foolproof. In the event of a security incident involving your data, Texas Poker will notify you within 72 hours of the incident being identified, along with information on the data affected and the steps taken to address the situation.

Texas Poker uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use:

• Necessary Cookies: These cookies are essential for the platform's core functions, including login authentication, session management, and security. They cannot be disabled and do not collect any personal information that could be used for marketing purposes.
• Preference Cookies: Saves your preferences such as interface language, display settings, and game choices so you don't have to reconfigure them every time you log in.
• Analytics Cookies: Helps us understand how players use the Texas Poker platform – which pages are visited most, where players drop off, and so on. This data is collected in aggregate form and does not identify you individually.
• Security Cookies: Used to detect suspicious login attempts, prevent CSRF attacks, and protect your account from unauthorised access.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect the functionality of the Texas Poker platform. For more information on how to manage cookies in your browser, refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding the personal data held by Texas Poker:

• Right of Access: You have the right to request and receive a copy of the personal data we hold about you.
• Right To Rectification: If your data is inaccurate or incomplete, you have the right to request a correction. Corrections will be processed within 14 working days.
• Right To Erasure: Under certain circumstances, you have the right to request the deletion of your personal data. This request may not be fully fulfilled if the data is required to comply with legal obligations — for example, financial transaction records that must be retained for 7 years under Malaysia's AML laws.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time.
• Right To Withdraw Consent: Where data processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to the withdrawal.

To exercise any of the above rights, contact us at support@texaspoker.click with the subject line "Privacy Rights Request – [Account Number]". We will verify your identity before processing your request and will respond with a decision within 30 calendar days.

Texas Poker retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to meet related legal obligations:

• Active Account Data: For the duration your account remains active and for a period of 2 years following account closure.
• Financial Transaction Records: A minimum of 7 years as required under Malaysia's anti-money laundering (AML) laws – this includes deposit and withdrawal histories via Touch 'n Go, GrabPay, DuitNow, and other methods.
• Identity Verification (KYC) Records: Minimum 5 years after account closure or after the business relationship ends.
• Customer Support Records: 3 years from the date of the conversation, for reference and dispute resolution purposes.
• Analytics Data: In aggregated, non-identifiable form, analytics data is retained indefinitely for platform improvement purposes.

Once the retention period has expired or the data is no longer needed, Texas Poker will securely delete or anonymise your personal data using methods that meet industry standards for safe data disposal.

Texas Poker may send you marketing communications about promotions, new bonuses, tournaments, and platform news – but only if you have given your consent during registration or through your account settings.

You can opt out of marketing emails at any time by:

• Click the "Unsubscribe" link at the bottom of any marketing email we send you.
• Updating your communication preferences in your Texas Poker account settings.
• Contacting our support team via Live Chat or email at support@texaspoker.click.

Please note that opting out of marketing emails does not mean you will stop receiving important service communications such as transaction notifications, account security alerts, and critical terms updates – these communications are necessary for the operation of your account and cannot be turned off.

Texas Poker reserves the right to amend this Privacy Policy from time to time to reflect changes in our data practices, updated legal requirements, or platform improvements. When we make material changes, we are committed to:

• Notifying all active players via email at least 14 days before the amendment takes effect.
• Displaying clear notices within the Texas Poker platform during the notice period.
• Archiving older versions of the Privacy Policy for reference when needed.
• Updating the "Last Updated" date at the top of this document for each amendment.

If you do not agree with the proposed amendments, you have the right to close your account before the amendments take effect. Your continued use of the Texas Poker platform after the effective date will be considered your acceptance of the amended Privacy Policy.

This Privacy Policy is effective from January 2026.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way Texas Poker handles your personal data, please contact us via:

• Live Chat: Available 24/7 within the Texas Poker platform – the fastest way to get an immediate response in Bahasa Melayu.
• Email: support@texaspoker.click – for detailed enquiries or formal privacy complaints. Use the subject line "Privacy Complaint" to help us process your request faster.

For formal privacy complaints that cannot be resolved through standard support channels within 30 days, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia or the Malaysian Communications and Multimedia Commission (MCMC), in accordance with the procedures set by the relevant authority.

Texas Poker takes every privacy enquiry and complaint seriously. We are committed to addressing all your concerns thoroughly, transparently, and within a reasonable timeframe.