tony88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") applies to all personal data collected and processed by the operator of tony88.co ("tony88", "we", "us", or "our") in connection with your use of the tony88 platform, including its website, account registration system, live casino, sportsbook, slots lobby, and all associated services.

tony88 is committed to handling your personal data responsibly, transparently, and in compliance with the data protection obligations imposed by our international gaming authority licence. By registering a tony88 account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

If you do not agree with any part of this Policy, you should not register for or use the tony88 Platform.

2. Data Controller

tony88.co is operated by the holder of the relevant international gaming authority licence. As the data controller for personal data collected through the Platform, tony88 determines the purposes and means of processing your personal information. Contact details for data-related enquiries are set out in Section 13 of this Policy.

3. Personal Data We Collect

tony88 collects personal data in the following categories:

Category	Examples	Source
Identity Data	Full name, date of birth, gender, nationality, MyKad or passport number	Provided by you at registration or KYC
Contact Data	Malaysian mobile number, email address, residential address	Provided by you at registration
Financial Data	Payment method details, bank account or e-wallet identifiers, transaction records	Provided by you during deposit/withdrawal; generated by Platform
Account & Activity Data	Username, login history, game play records, bet history, bonus redemptions, account preferences	Generated automatically by your use of the Platform
Technical Data	IP address, device type, browser type, operating system, session duration, referral URL	Collected automatically via server logs and cookies
KYC Documentation	Scanned identity documents, selfie/liveness check images, proof of address, source of funds documentation	Provided by you during verification process
Communications Data	Support chat transcripts, email correspondence, complaint records	Generated during your interactions with tony88 support

tony88 does not intentionally collect special categories of sensitive personal data (such as health, biometric beyond liveness checks, or political opinions) except where strictly required by regulatory obligations.

4. How We Use Your Personal Data

tony88 uses the personal data collected for the following purposes:

• Account management: Creating, operating, and maintaining your tony88 account, including verifying your identity and age (21+ requirement), managing your balance, and processing transactions.
• Payment processing: Facilitating deposits and withdrawals via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank2u, CIMB Clicks, Public Bank, and other accepted Malaysian payment methods.
• Regulatory compliance: Meeting our anti-money-laundering (AML), Know Your Customer (KYC), counter-terrorism financing, and responsible gaming obligations under our international gaming authority licence.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and terms of service violations.
• Platform operation and improvement: Analysing usage patterns to improve game performance, navigation, and user experience across all devices including mobile browsers used by Malaysian players.
• Responsible gaming: Monitoring account activity to identify potential problem gambling patterns and applying responsible gaming tools in accordance with our licence obligations.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. Marketing consent may be withdrawn at any time.
• Legal proceedings: Establishing, exercising, or defending legal claims where necessary.

5. Legal Basis for Processing

Where tony88 processes personal data, we rely on one or more of the following legal bases:

• Contract performance: Processing necessary to provide the services you have requested under the tony88 Terms and Conditions, including operating your account and processing payments.
• Legal obligation: Processing required to comply with AML, KYC, responsible gaming, and other regulatory requirements imposed by our international gaming authority licence.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform analytics, where these interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications, where your consent has been explicitly obtained. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing and Third Parties

6.1 tony88 does not sell, rent, or trade your personal data to third-party marketing organisations.

6.2 tony88 shares personal data with third-party service providers only to the extent necessary to operate the Platform, including:

• Payment processors: To facilitate deposits and withdrawals in MYR via local Malaysian payment channels;
• KYC and identity verification providers: To conduct age verification and identity checks required under our licence;
• Fraud detection and AML screening services: To identify and prevent financial crime and prohibited conduct;
• Game software providers: Who may process limited technical and session data as part of game delivery;
• Cloud hosting and infrastructure providers: Who store and process Platform data in secured environments.

6.3 All third-party service providers engaged by tony88 are contractually required to process personal data only for specified purposes, to maintain appropriate security standards, and to comply with applicable data protection obligations.

6.4 tony88 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required by law, court order, or as necessary to protect the rights and safety of tony88 or other parties.

7. Cookies and Tracking Technologies

7.1 The tony88 Platform uses cookies and similar tracking technologies to support session management, security, analytics, and user experience personalisation. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function, including session authentication and security tokens. These cannot be disabled.
• Analytics cookies: Used to understand how players interact with the Platform, which pages are visited most frequently, and where technical issues occur. Data collected is aggregated and not used to identify individuals.
• Preference cookies: Used to remember your account preferences and settings between sessions.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content and track the effectiveness of our marketing communications.

7.2 You may control non-essential cookies through your browser settings. Disabling certain cookies may affect Platform functionality. tony88 does not respond to Do Not Track signals from browsers at this time.

8. Data Retention

8.1 tony88 retains personal data for the period required by our international gaming authority licence and applicable AML legislation. In practice, this means:

• Account and transaction data is retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later;
• KYC documentation is retained for the period specified by our licence authority, typically five to seven years;
• Support communications are retained for a minimum of three (3) years;
• Marketing consent records are retained for as long as the consent is relevant and for a reasonable period thereafter.

8.2 Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

9. Your Data Rights

Subject to applicable data protection law and our regulatory obligations, you have the following rights in respect of your personal data held by tony88:

• Right of access: To request a copy of the personal data tony88 holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data;
• Right to erasure: To request deletion of your personal data where we no longer have a lawful basis to retain it, subject to our regulatory retention obligations;
• Right to restrict processing: To request that we limit how we use your personal data in certain circumstances;
• Right to data portability: To request a machine-readable copy of the personal data you have provided to tony88, where technically feasible;
• Right to object: To object to processing based on legitimate interests, including direct marketing.

To exercise any of the above rights, contact the tony88 support team via live chat or in writing. We will respond to verified requests within 30 days. Identity verification may be required before requests are actioned.

10. Data Security

10.1 tony88 implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS encryption for all data in transit between your browser and our servers;
• Encrypted storage of passwords using industry-standard salted hashing;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Automated fraud and anomaly detection on account activity.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tony88 will notify affected players and the relevant regulatory authority in accordance with applicable breach notification obligations.

11. Children and Age Restriction

The tony88 Platform is strictly for individuals aged 21 and above. tony88 does not knowingly collect personal data from individuals under this age. Where we become aware that personal data has been collected from a person below the minimum age, that account will be closed and the personal data permanently deleted. If you believe a minor has registered a tony88 account, please contact our support team immediately.

12. Changes to This Privacy Policy

tony88 may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable legal and regulatory requirements. When material changes are made, we will notify registered players via the Platform or by email to the registered account address prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.

13. Contact Us

For privacy-related enquiries, requests to exercise data rights, or concerns about how tony88 handles your personal data, please contact our support team:

• Live chat: Available 24/7 from within the tony88 Platform
• Email: [email protected] (plain text — not a clickable link)

We aim to acknowledge all privacy-related requests within 5 business days and to resolve substantive requests within 30 days of identity verification. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority or our gaming licence authority.