Tumi123 Privacy Policy – Malaysian Member Data Protection

This Privacy Policy describes how tumi123 ("Platform", "We", "tumi123") collects, uses, stores, and protects your personal information when you use the tumi123 platform accessible at https://tumi123.ws and any associated mobile applications.

Tumi123 is a digital entertainment platform offering Sports Betting, Live Casino, lottery, poker, virtual sports, and online slots to eligible users in Malaysia. In providing these services, we need to collect certain personal information from members to ensure the platform operates safely, fairly, and in compliance with all applicable legal requirements.

This Privacy Policy applies to all registered tumi123 members, website visitors, and any individuals who interact with our platform in any capacity. We are committed to processing all personal information in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA) and the highest international privacy standards.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact our Data Privacy Officer by email at support@tumi123.ws. We are committed to responding to all privacy-related enquiries within 14 business days.

Tumi123 only collects information that is directly necessary to provide our platform services and fulfil our legal obligations. The following are the categories of data we collect:

Tumi123 does not collect sensitive information such as medical data, religious beliefs, or political views. We also do not require your full bank account number — all payments are processed through the secure interfaces of e-wallet providers or FPX Malaysia, and tumi123 never has direct visibility of your bank account details.

From time to time, tumi123 may also collect data you provide voluntarily through feedback, surveys, or promotional contests you choose to enter. Participation in these optional activities is entirely at your own discretion.

Tumi123 uses collected personal information for limited and legitimate purposes only. Every use of data has a clear legal basis under the Malaysian PDPA. The following are the primary purposes for which your data is used:

• Platform Service Provision: Creating and managing your account, processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, or CIMB Clicks, processing withdrawal of winnings, and enabling access to all tumi123 games.
• Identity Verification (KYC): Verifying that you meet the minimum age requirement of 21 years and are acting on your own behalf, in line with applicable legal compliance requirements.
• Security & Fraud Prevention: Identifying and investigating suspicious activity, protecting your account from unauthorised access, and preventing platform abuse including the creation of multiple accounts.
• Service Communications: Sending important account notifications, transaction confirmations, policy updates, and customer support responses.
• Marketing (with consent): Sending promotions, bonus offers, and information about new games – only to members who have given explicit consent to receive marketing communications.
• Analytics & Improvement: Analysing platform usage patterns in aggregate (not at an individual level) to improve the user experience, platform performance, and game offerings.
• Legal Compliance: Meeting applicable legal reporting and compliance obligations, including anti-money laundering (AML) laws.

Tumi123 will not use your data for any purpose beyond those stated above without first obtaining your consent. If we intend to use your data for a new purpose not anticipated in this Privacy Policy, we will notify you and seek your consent before doing so.

Tumi123 does not sell, rent, or transfer your personal information to third parties for their own marketing purposes. This has been an unwavering commitment since tumi123 first launched.

However, in the course of operating the platform, tumi123 may share necessary data with the following categories of third parties, subject to strict controls:

• Payment Processors: E-wallet providers (Touch 'n Go, GrabPay, Boost, ShopeePay) and banking platforms (DuitNow, FPX Maybank2u, CIMB Clicks) receive the information necessary to process your transactions. All these providers maintain their own privacy policies in compliance with Malaysian financial regulations.
• Game Providers: Casino game software and Sports Betting partner providers receive only the minimum technical data required to operate the games. They do not receive your full personal information and are bound by strict confidentiality agreements with tumi123.
• Identity Verification Providers: Third-party KYC services used to verify identity documents during the verification process — only when required and with data limited strictly to the purpose of verification.
• Legal Authorities: tumi123 will disclose information to Malaysian law enforcement authorities or relevant regulatory bodies when required by applicable law, or when we believe such disclosure is necessary to protect the rights, property, or safety of tumi123, our members, or the public.

Protecting your personal data is a responsibility we take seriously at tumi123. We implement multiple layers of technical and organisational security controls to ensure your information remains protected at all times:

• 256-bit SSL Encryption: All communications between your browser or app and tumi123's servers are encrypted using TLS protocol with a 256-bit key – the highest security standard used by leading financial institutions.
• Internal Access Controls: The "least privilege" principle is strictly observed — tumi123 staff can only access the data directly required to perform their duties. All access to sensitive member data is logged and audited on a regular basis.
• Two-Factor Authentication (2FA): tumi123's internal systems require 2FA for all access to sensitive member data. We also offer 2FA to members to help protect their accounts.
• 24/7 Security Monitoring: Our automated monitoring system detects and flags suspicious activity on the tumi123 platform around the clock, including unauthorised access attempts.
• Regular Security Audits: tumi123 conducts regular security assessments and independent penetration testing to identify and address security vulnerabilities before they can be exploited.
• Secure Data Backup: Member data is backed up regularly to secure, separate locations with equally strict access controls, ensuring rapid data recovery in the event of a technical incident.

While tumi123 takes all reasonable steps to protect your data, no security system is entirely impenetrable. In the event of a material data breach that may affect your privacy rights, tumi123 is committed to notifying affected members within the timeframe required by Malaysia's PDPA and to taking appropriate remedial action promptly.

You also play an important role in keeping your data secure. Please ensure your tumi123 password is strong and unique, do not share your login credentials with anyone, and contact us immediately if you suspect your account has been compromised.

Tumi123 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable law. The following are our data retention guidelines:

• Active Account Data: For as long as your tumi123 account remains active, we retain all relevant profile information and gaming history to ensure the platform functions properly and to provide you with a complete account history.
• After Account Closure: When an account is closed at a member's request or for compliance reasons, tumi123 retains the necessary records for a minimum period of seven (7) years, in line with Malaysian financial and anti-money laundering legal requirements.
• Transaction History: Records of all financial transactions — including deposits via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, and withdrawals — are retained for seven (7) years for audit and legal compliance purposes.
• Security Logs: Technical and security log data used to detect fraud and suspicious activity is retained for twelve (12) months, after which it is deleted or anonymised.
• Customer Support Communications: Records of all correspondence between you and the tumi123 support team are retained for three (3) years to enable us to provide consistent support and resolve any disputes that may arise.

Once the relevant retention period expires, tumi123 will delete or anonymise your data in a secure and irreversible manner, unless we are legally required to retain it for longer.

Under Malaysia's PDPA and the privacy standards we uphold, every tumi123 member has the following rights regarding their personal data:

To exercise any of the rights above, please email us at support@tumi123.ws with the subject line "Data Privacy Rights Request". Include your full name and registered phone number for identity verification. tumi123 is committed to responding to all privacy rights requests within 14 working days.

Tumi123 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored by your web browser when you visit tumi123. The following are the types of cookies we use:

• ImportantEssential Cookies: Required for the tumi123 platform to function correctly — including login session management, security, and language preferences. These cookies cannot be disabled.
• AnalyticsAnalytics Cookies: Helps us understand how users interact with the platform – the most frequently visited pages, session duration, and exit points. This data is used in aggregate form only for platform improvements.
• OptionalFunctional Cookies: Saving your preferences — such as set betting limits, display settings, and notification preferences — so you don't have to configure them each time you log in.

You can manage cookies through your web browser settings. However, disabling essential cookies may affect the functionality of the tumi123 platform and you may be unable to log in or use the service fully. Disabling analytics and functional cookies will not affect your ability to use the platform – it simply means your experience may be less personalised.

Tumi123 does not use third-party advertising cookies or marketing tracking pixels that share your data with external advertising networks.

Tumi123 strictly does not provide services to individuals under the age of 21. Our platform is not directed at children or minors, and we do not knowingly collect personal data from individuals under 21 years of age.

All tumi123 account registrations require verification that the applicant is at least 21 years of age. We also conduct additional age checks during the KYC process for withdrawals that exceed certain thresholds.

The tumi123 platform may contain links or integrations with third-party services, including casino game providers, sports data providers for badminton, cricket, and football betting, as well as payment providers such as Touch 'n Go eWallet, GrabPay, and DuitNow.

When you interact with these third-party services — for example, when you enter payment details within the Touch 'n Go or Maybank2u FPX interface — you are also subject to those third parties' own privacy policies. tumi123 is not responsible for the privacy practices of any third party and encourages you to read their privacy policies separately.

Tumi123 only works with third-party providers that have a strong track record in data protection and comply with relevant privacy standards. However, once you leave the tumi123 platform and enter a third-party environment, this tumi123 Privacy Policy no longer applies.

Tumi123 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our privacy practices, applicable law, or platform improvements. All amendments will:

• Be published on this page with a new "Updated" date at the top.
• Registered members will be notified via in-platform notifications and/or email of any material changes that significantly affect your privacy rights.
• Takes effect no earlier than thirty (30) days after notice is issued for material changes – giving you sufficient time to review those changes.

Continued use of the tumi123 platform after the effective date of an updated Privacy Policy constitutes acceptance of the new privacy terms. If you disagree with any amendments to this Privacy Policy, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 7 above.

If you have any questions, concerns, or complaints regarding how tumi123 handles your personal data, or if you wish to exercise any of the privacy rights set out in Section 7, please reach out to us through the following channels:

• Data Privacy Email: support@tumi123.ws – Use the subject line "Data Privacy" to ensure your enquiry is routed directly to our Data Privacy Officer.
• Live Chat Platform: Available 24 hours a day, 7 days a week directly within the tumi123 platform – for general privacy enquiries that require an immediate response.
• Response Time: tumi123 is committed to responding to all privacy-related enquiries within 14 working days. More complex complaints may take up to 30 working days.

This Privacy Policy is governed by and construed in accordance with the laws of Malaysia, in particular the Personal Data Protection Act 2010 (PDPA). If you are dissatisfied with how we handle your privacy complaint, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Tumi123 values the trust you place in us by entrusting your personal data to our care. We are committed to continuously striving to be a responsible, transparent, and trustworthy data custodian for every member across Malaysia – from Kuala Lumpur to Kota Kinabalu, from Johor Bahru to Kota Bharu.