Tony88 Privacy Policy – Data Protection & Privacy for Malaysian Players

Welcome to tony88's Privacy Policy. This document transparently explains how tony88 ("we", "Platform") collects, processes, stores, and protects your personal data as a user or registered member of our platform.

This Privacy Policy applies to all services offered by tony88, including the website, sports betting platform (Malaysia Super League football, EPL, badminton), Live Casino, slots, Virtual Sports, e-sports, and all communication channels associated with our platform.

Tony88 operates in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010, the primary legislation governing the processing of personal data in the context of commercial transactions in Malaysia. By accessing or using the tony88 platform, you acknowledge that you have read and understood this Privacy Policy.

Tony88 collects your personal data through several methods — directly from you during registration and platform use, as well as automatically via technologies such as cookies and server logs.

The data we collect is used solely for legitimate, stated purposes. Below is a full list of how your data is used on the tony88 platform:

• Account management: Create, verify, and maintain your account securely.
• Financial transaction processing: Handling deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, Maybank2u, CIMB Clicks, and withdrawals to your account.
• Identity Verification (KYC): To comply with legal requirements for verifying player identities and preventing money laundering.
• User experience enhancement: To personalise content and game recommendations based on your activity history — for example, suggesting relevant EPL Sports Betting or jackpot slots that match your interests.
• Service communications: Sending account notifications, security updates, and relevant promotional information (where you have consented to receive them).
• Fraud detection and security: Identifying and preventing suspicious activity, money laundering, and any attempted fraud.
• Legal compliance: Fulfilling obligations under Malaysian law, including PDPA 2010, AML/CFT, and directives from the relevant authorities.
• Research and development: Analyzing aggregated data (not individual data) to improve tony88's products and services.

Tony88 does not use your data for any purpose other than those stated above without first obtaining your consent.

Tony88 does not sell your personal data to any third party under any circumstances. However, in certain limited situations, we may need to share data with the following parties:

• Payment service providers: Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and associated banks such as Maybank and CIMB — solely for the purpose of processing your financial transactions.
• Game service providers: Evolution Gaming, Playtech, Microgaming, and Pragmatic Play – only the minimum data required to deliver live casino and slots games.
• Technology service providers: Companies providing cloud infrastructure, hosting, and cybersecurity services, bound by strict confidentiality agreements.
• Legal authorities: When required by Malaysian law, court order, or investigation by a relevant enforcement agency.
• Auditing body: Independent auditing bodies that verify game fairness and licensing compliance – using anonymised data wherever possible.

Tony88 continually invests in the latest security technologies and procedures to ensure your data is always protected against unauthorised access, disclosure, alteration, or destruction.

• 256-bit SSL/TLS Encryption: All communications between your browser and tony88's servers are encrypted using the latest TLS 1.3 protocol — the same standard used by leading banks in Malaysia.
• Secure password storage: Your password is never stored in plain text. It is processed through a robust bcrypt hashing algorithm before being stored in our database.
• Two-Factor Authentication (2FA): We encourage all players to enable two-factor authentication for an added layer of security on their account.
• 24/7 System Monitoring: tony88's cybersecurity team continuously monitors all system activity to detect and respond to any threats in real time.
• Periodic penetration testing: The tony88 platform undergoes regular security assessments by independent cybersecurity experts to identify and address any vulnerabilities.
• Data segregation: Financial and personal data are stored in separate systems with strict access controls – only authorised staff can access data relevant to their specific role.

Tony88 uses cookies and similar tracking technologies to enhance your experience on our platform. Below are the types of cookies we use and their purposes:

You can control and manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the tony88 platform.

Under Malaysia's Personal Data Protection Act (PDPA) 2010, you as a tony88 player have the following rights regarding your personal data:

To exercise any of the rights above, please contact tony88's Data Protection Officer by email at privacy@tony88.biz or via our platform's live chat. We will respond to your request within 30 business days.

Tony88 retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law.

• Active account data: Retained for the duration your account remains active and for 2 years following account closure or inactivity.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysia's AML/CFT legal requirements and the Inland Revenue Board (LHDN) regulations.
• Identity verification records (KYC): Retained for a minimum of 5 years after the business relationship ends, in accordance with Malaysian legal requirements.
• Customer support and communication logs: Retained for 2 years for dispute resolution and service improvement purposes.
• Technical log data: Retained for 90 days for security purposes and technical troubleshooting.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered.

Tony88 takes child protection very seriously. Our platform is strictly intended for individuals aged 18 and above. We actively take measures to prevent registration by minors or underage individuals.

• Tony88 does not knowingly collect or process personal data from individuals under the age of 18.
• Should we discover that personal data of an individual under the age of 18 has been collected without our knowledge, such data will be deleted immediately and the account in question will be closed.
• The identity verification (KYC) process we implement is part of our commitment to ensuring that the tony88 platform remains inaccessible to minors.

If you have reason to believe that a minor has registered on the tony88 platform, please contact us immediately at support@tony88.biz so that immediate action can be taken.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how tony88 handles your personal data, please contact our Data Protection Officer (DPO):

• Email: privacy@tony88.biz
• General Support Email: support@tony88.biz
• Live Chat: Available 24/7 on the tony88 platform
• Response Time: Within 5 business days for privacy enquiries; 30 days for formal data subject rights requests.

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection or the relevant regulatory authority.