Privacy Policy – tony88

1. Introduction

This Privacy Policy ("Policy") describes how tony88 ("tony88," "we," "us," or "our") collects, processes, stores, and protects the personal data of individuals ("you," "your," or "Member") who access or use the tony88 platform at https://tony88.win and all associated services (collectively, the "Services").

tony88 takes its data protection obligations seriously. This Policy has been prepared to be transparent, readable, and genuinely informative — not to bury your rights in legal language. If there are sections you do not understand or wish to discuss, please contact our support team at any time.

By registering an account with tony88 or otherwise using the Services, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein. This Policy should be read alongside our Terms and Conditions, which govern your use of the tony88 platform.

2. Data Controller

tony88 is the data controller responsible for the personal data you provide when using the platform. As data controller, tony88 determines the purposes and means by which your personal data is processed.

For any privacy-related enquiries, requests to exercise your data rights, or concerns regarding this Policy, the designated point of contact is our Data Protection team, reachable via the contact details in Section 15 of this Policy.

3. Personal Data We Collect

tony88 collects personal data in the following categories. The specific data points collected will depend on how you interact with our Services.

4. How We Collect Your Data

tony88 collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated collection: Data automatically collected when you interact with the tony88 platform, including through cookies, log files, and technical tracking tools embedded in our platform infrastructure.
• Third-party sources: Data received from payment processors (e.g., banking partners, e-wallet operators such as Touch n Go and Boost), identity verification providers, and fraud detection services engaged by tony88 as data processors.
• Publicly available sources: In limited circumstances, tony88 may supplement account information with data from publicly available sources for fraud prevention or AML screening purposes.

5. Legal Basis for Processing

tony88 processes your personal data under one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform the contract between you and tony88 — including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required for tony88 to comply with applicable legal and regulatory requirements, including anti-money laundering laws, responsible gaming regulations, and licensing conditions.
• Legitimate interests: Processing for purposes of fraud detection, security monitoring, platform improvement, and responsible gaming analysis where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications or optional features where you have provided explicit, freely given, and revocable consent.

6. How We Use Your Personal Data

tony88 uses the personal data we collect for the following purposes:

• To create, verify, and administer your tony88 account;
• To process deposits, withdrawals, and in-platform transactions via your selected payment method (including Touch n Go eWallet, Boost, Maybank, CIMB, Public Bank, USDT, or Bitcoin);
• To verify your identity and age as part of our mandatory KYC programme;
• To detect and prevent fraud, money laundering, cheating, and other prohibited conduct;
• To administer promotions, bonuses, and loyalty programmes;
• To monitor gameplay for responsible gaming indicators and to intervene where a Member may be displaying signs of problem gambling;
• To communicate with you regarding your account, support requests, and platform updates;
• To send marketing communications where you have opted in to receive them (you may opt out at any time);
• To comply with applicable laws, regulations, and licensing obligations;
• To improve, develop, and secure the tony88 platform.

7. Data Sharing and Disclosure

tony88 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:

7.1 Service Providers and Data Processors

tony88 engages third-party service providers who process personal data on our behalf under strict contractual data protection obligations. These include payment processors, identity verification providers, cloud hosting providers, fraud detection services, and customer support platform providers. All such providers are selected with due regard for their data protection standards.

7.2 Legal and Regulatory Disclosure

tony88 may disclose personal data to competent regulatory authorities, law enforcement agencies, courts, or other public bodies where required to do so by applicable law, court order, or regulatory directive. Such disclosures will be limited to what is legally required and tony88 will notify affected Members where permitted by law.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of tony88's assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection commitments.

7.4 With Your Consent

tony88 may share your personal data with other parties where you have given your explicit, informed, and freely revocable consent to such sharing.

8. Cookies and Tracking Technologies

tony88 uses cookies and similar tracking technologies (collectively, "Cookies") on our platform. The following categories of Cookies are used:

• Essential Cookies: Strictly necessary to operate the tony88 platform, maintain your authenticated session, and process transactions. These Cookies cannot be disabled without impairing platform functionality.
• Performance Cookies: Used to collect anonymised information about how the tony88 platform is used — which pages are visited most frequently, where errors occur, and how players navigate the site. This data is used to improve the platform.
• Functional Cookies: Allow the platform to remember preferences you have set, such as language settings or layout choices, to provide a more personalised experience.
• Security Cookies: Used for fraud detection and to identify suspicious login patterns, protecting your account from unauthorised access.

You can manage Cookie preferences through your browser settings. Disabling non-essential Cookies will not prevent you from using the tony88 platform but may affect certain personalisation features.

9. Data Retention

tony88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with applicable AML and gaming regulatory requirements.
• KYC documents (identity verification materials) are retained for a minimum of five (5) years after account closure or the date of the last transaction, whichever is later.
• Communication data (support transcripts, emails) is retained for up to three (3) years following resolution of the relevant support interaction.
• Technical and usage data collected for platform improvement and security monitoring is retained for up to twenty-four (24) months in identifiable form, after which it is anonymised or deleted.

Upon the expiry of applicable retention periods, tony88 will securely delete or anonymise personal data. Where data is required for ongoing legal proceedings or regulatory investigations, retention may be extended until resolution.

10. International Data Transfers

tony88 operates internationally. Your personal data may be transferred to, stored in, and processed in countries other than Malaysia. Where such transfers occur, tony88 will ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections afforded in Malaysia under applicable data protection law.

Where data is transferred to service providers in jurisdictions that may not offer the same level of data protection as Malaysia, tony88 implements contractual protections — including standard data protection clauses — to ensure your personal data remains adequately protected.

11. Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in respect of your personal data held by tony88:

• Right of Access: You have the right to request a copy of the personal data tony88 holds about you and information about how it is processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by tony88 be corrected without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request deletion of your personal data. This right may be limited where retention is required by law or for the establishment, exercise, or defence of legal claims.
• Right to Restriction: You have the right to request that tony88 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being verified.
• Right to Object: You have the right to object to processing of your personal data based on tony88's legitimate interests, including for direct marketing purposes.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

12. Security

tony88 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the tony88 platform;
• Hashed and salted storage of passwords — tony88 does not store passwords in plain text;
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate need;
• Regular security assessments and penetration testing of platform infrastructure;
• Two-factor authentication available for all Member accounts.

Notwithstanding the above, no method of data transmission or storage is 100% secure. tony88 cannot guarantee absolute security of your personal data and will not be held liable for breaches that result from circumstances beyond our reasonable control. In the event of a data breach that poses a risk to your rights and freedoms, tony88 will notify affected Members as required by applicable data protection law.

13. Children and Age Restrictions

The tony88 platform is strictly intended for adults aged 21 years and older. tony88 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If tony88 becomes aware that personal data has been collected from an individual below the minimum age, such data will be promptly deleted and the associated account closed.

If you have reason to believe that a minor has provided personal data to tony88, please contact our support team immediately so that appropriate action can be taken.

14. Changes to This Privacy Policy

tony88 reserves the right to update or modify this Privacy Policy at any time. Material changes will be communicated to registered Members via a notice on the tony88 platform or by email to the address on file. The "last updated" date at the top of this Policy will be revised to reflect any changes.

Your continued use of the tony88 platform following the effective date of a revised Policy constitutes your acceptance of the updated terms. If you disagree with any changes, you may request account closure by contacting our support team.

We recommend reviewing this Policy periodically to remain informed of our current data protection practices.

15. Contact and Complaints

For all privacy-related enquiries, requests to exercise data rights, or concerns regarding this Policy, please contact the tony88 Data Protection team using the details below:

tony88 will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 calendar days. Where a request is complex or numerous, the response period may be extended by up to an additional 60 days, with notice provided to you of the extension and the reasons for it.

If you are not satisfied with tony88's response to a privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.