Privacy Policy Thunderpick — Malaysia Player Data Protection

Thunderpick ("we", "Platform") takes the protection of our users' personal data seriously. This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of information you provide while using the Thunderpick online betting platform at thunderpick.vin and our official mobile app.

This policy applies to all registered users, website visitors, and anyone who interacts with our services. By using the thunderpick platform, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform.

We provide this policy in Bahasa Malaysia to make it easier for our users in Malaysia to understand. Should there be any discrepancy between the Bahasa Malaysia version and any other language version, the language version used in our primary legal agreements shall prevail.

Thunderpick collects various types of information depending on how you interact with our platform. Below are the main categories of data we collect:

We may also receive information about you from third-party sources such as identity verification providers, fraud prevention agencies, and payment partners, solely for the purpose of verifying your identity and ensuring platform security.

Thunderpick uses collected data solely for legitimate and necessary purposes. We will not use your information for any other purpose without obtaining your consent first.

The primary purposes for which we use your data are as follows:

• Account management: Register, verify, and manage your user account, including KYC processes required by law.
• Service provision: Process wagers, deposits, withdrawals, and all financial transactions related to platform use.
• Security and fraud prevention: Detect and prevent unauthorised access, fraudulent activity, money laundering, and other security threats.
• Legal compliance: Fulfil AML (Anti-Money Laundering), KYC compliance obligations, and reporting requirements to regulatory authorities.
• Service communications: Send important account-related notices, policy updates, and transaction information via email or in-app notifications.
• Marketing: Send promotional offers, bonuses, and new product information — only to users who have consented to receive marketing communications.
• Platform improvements: Analyse usage patterns to improve the functionality, performance, and overall user experience of our platform.
• Customer support: Resolve complaints, respond to enquiries, and provide necessary technical support.

Thunderpick does not sell, rent, or trade your personal data to third parties. However, there are limited situations where we need to share your information with others for legitimate operational purposes:

• Payment service providers: Required financial information is shared with trusted payment providers such as credit card processors and e-wallet providers to enable secure transaction processing.
• Game providers: Minimal game session data is shared with casino and sports software providers solely to ensure games function correctly and betting results are accurate.
• Third-party identity verification: Identity information is shared solely with approved KYC services for mandatory age and identity verification purposes.
• Legal authorities: We will disclose information to law enforcement or regulatory authorities when required to do so by a court order or applicable law.
• Business transfers: If Thunderpick is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, subject to notification to affected users.

Thunderpick implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, loss, destruction, or accidental disclosure.

Key security measures we apply include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols, ensuring sensitive information cannot be intercepted in transit.
• Encryption of data at rest: Sensitive data stored in our databases is protected with AES-256 encryption, ensuring your information remains secure even in the event of a database breach.
• Two-factor authentication (2FA): We offer and encourage the use of two-factor authentication on all accounts to add an extra layer of security.
• Strict access controls: Only authorised staff with a legitimate business need may access user data, and all access is logged for audit purposes.
• Continuous monitoring: Our systems are monitored around the clock to detect suspicious activity, intrusion attempts, and security anomalies.
• Regular security audits: We conduct regular penetration testing and security audits by independent third parties to ensure optimal levels of protection.

Thunderpick uses cookies and similar tracking technologies to enhance the user experience, understand how our platform is used, and ensure proper functionality. Cookies are small text files stored on your device when you visit our website.

Types of cookies we use:

• Essential cookies: Required for core platform functions such as login session management and transaction processing. These cookies cannot be disabled.
• Performance cookies: Collect information about how visitors use our website, helping us identify technical issues and improve performance.
• Functional cookies: Remember your preferences such as language, display settings, and login details to make repeat visits more convenient.
• Analytics cookies: Helps us understand overall platform usage patterns to make data-driven decisions that improve our services.

You can manage your cookie settings through your web browser or via the cookie settings panel available on our platform. Please note that disabling certain cookies may affect the functionality of specific platform features.

Thunderpick retains your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including meeting any legal, accounting, or reporting requirements.

In general, data retention periods are as follows:

• Active account data: Retained for as long as your account is active and for a defined period after account closure to meet legal requirements.
• Financial transaction records: Retained for a minimum of 5 years from the transaction date in accordance with anti-money laundering and tax legal requirements.
• KYC and identity verification records: Retained for the period stipulated by the relevant regulatory authorities, typically between 5 and 7 years.
• Support communication logs: Retained for 2 years for reference and dispute resolution purposes.
• Analytics and technical log data: Typically retained for no more than 13 months before being anonymised or deleted.

Once the applicable retention period expires, your data will be securely deleted or anonymized so it can no longer be personally linked to you.

As a Thunderpick user, you have certain rights regarding your personal data. We are committed to respecting and facilitating the exercise of these rights:

The Thunderpick platform is strictly for individuals aged 18 and above. We do not intentionally collect or process personal data from anyone under the age of 18.

If we find that we have collected personal data from a child without valid parental or guardian consent, we will take immediate steps to delete that information and close the relevant account.

If you believe we may hold information about a child, please contact us immediately so we can take appropriate action.

Thunderpick reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. The "Updated" date at the top of this page will reflect the effective date of the latest version.

For significant changes, we will notify you through:

• Clear notices on our website and app before changes take effect.
• An email will be sent to the address registered on your account for any changes that directly affect your rights.
• In-app notifications during your next login session.

Continued use of the platform after any published changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please do not hesitate to contact us.

Our privacy team is ready to assist you through the following channels:

• Live Chat: The fastest channel — available 24/7 within the Thunderpick platform.
• Privacy Email: [email protected] — for written inquiries requiring documentation.
• FAQ: Visit page FAQ page for answers to the most frequently asked privacy questions.

We are committed to responding to all privacy-related enquiries within 5 business days, and to data rights requests within 30 business days in accordance with applicable legal requirements.