Tony88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") issued by Tony88 ("the Platform", "the Operator", "We", "Us", "Our") and governs the collection, use, storage, sharing, and protection of personal data relating to individuals who access, register with, or otherwise interact with the Tony88 website at tony88.cam and any associated subdomains or services ("the Platform", "our Services").

Tony88 is committed to protecting the privacy and personal data of its Members and website visitors. This Policy is drafted in accordance with internationally recognised data protection principles, including those reflected in the General Data Protection Regulation (GDPR) framework, and is intended to provide clear, transparent, and complete information about how we handle personal data.

By registering an account on Tony88, continuing to use the Platform after the effective date of this Policy, or affirmatively accepting this Policy where prompted, you acknowledge that you have read, understood, and agreed to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request account closure.

This Policy should be read in conjunction with Tony88's Terms and Conditions, which are incorporated by reference.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"), including name, identification number, contact details, financial information, location data, and online identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, use, disclosure, restriction, erasure, or destruction.
• "Controller" means Tony88, which determines the purposes and means of processing personal data.
• "Processor" means a third party that processes personal data on behalf of Tony88 pursuant to a data processing agreement.
• "Member" means any individual who has completed the Tony88 registration process and holds an active or closed account on the Platform.
• "Visitor" means any individual who accesses the tony88.cam website without registering an account.
• "KYC" means Know Your Customer — the verification process through which Tony88 confirms a Member's identity, age, and source of funds.
• "Cookies" means small text files placed on a user's device by a web server, used to maintain session state and gather analytical data.

3. Data We Collect

3.1 Registration Data

When you create a Tony88 account, we collect the personal data you provide directly, which typically includes: full legal name, date of birth, email address, mobile phone number, preferred username, and your nominated currency (MYR for most Malaysian Members). We use this data to establish and maintain your account.

3.2 Identity Verification (KYC) Data

As part of our KYC and anti-money-laundering obligations, we may request and collect: government-issued identification (such as Malaysian MyKad or passport), proof of residential address (such as a utility bill or bank statement), selfie photographs for identity confirmation, and documentation evidencing source of funds. This data is processed solely for verification purposes.

3.3 Financial Data

We collect data relating to your deposits and withdrawals, including: payment method details (e-wallet account references for Touch'n Go eWallet, Boost, GrabPay; bank account identifiers for Maybank, CIMB, Public Bank, Hong Leong Connect; DuitNow and FPX transaction references), transaction amounts, currency, timestamps, and transaction status. We do not store complete card numbers or full e-wallet credentials — payment processing is handled by certified third-party payment gateways.

3.4 Transactional & Gameplay Data

We record all betting and gaming activity on your account, including: wagers placed, games accessed, betting markets selected, bet amounts, outcomes, bonus activations, and session durations. This data is essential for account management, dispute resolution, fraud detection, and regulatory compliance.

3.5 Technical & Usage Data

When you access the Tony88 Platform, we automatically collect certain technical data, including: IP address, device type and operating system, browser type and version, referring URL, pages visited, time spent on pages, and session timestamps. This data is used to maintain platform security, detect suspicious access patterns, and improve the user experience.

3.6 Communication Data

Records of your communications with Tony88 — including live chat transcripts, email correspondence, and support ticket content — are retained for quality assurance, staff training, and dispute resolution purposes.

3.7 Preference & Profile Data

We may retain data about your platform preferences, favourite games, self-imposed responsible gambling limits, and notification settings to personalise your experience and administer your responsible gambling settings.

4. How We Collect Data

Tony88 collects personal data through the following mechanisms:

• Direct submission: Data you provide when registering, completing KYC, making a deposit or withdrawal request, contacting support, or updating your profile.
• Automated technical collection: Server logs, cookies, pixel tags, and device fingerprinting that capture technical access and usage data automatically when you visit the Platform.
• Third-party sources: Data received from payment processors to confirm transaction status; data from identity verification service providers used in KYC; and fraud prevention databases where required.
• Responsible gambling monitoring: Automated behavioural analysis tools that flag usage patterns potentially indicative of problem gambling, in accordance with our responsible gambling obligations.

5. Purposes of Processing

The following table summarises the primary purposes for which Tony88 processes personal data:

Purpose	Data Categories Used	Legal Basis
Account creation and management	Registration data, identity data	Contract performance
Payment processing and withdrawal	Financial data, KYC data	Contract performance; legal obligation
Identity verification (KYC/AML)	KYC data, financial data	Legal obligation
Fraud detection and prevention	Technical data, transactional data	Legitimate interest
Platform security and integrity	Technical data, gameplay data	Legitimate interest
Customer support and dispute resolution	Communication data, transactional data	Contract performance; legitimate interest
Responsible gambling monitoring	Gameplay data, preference data	Legal obligation; legitimate interest
Platform improvement and analytics	Technical data, usage data	Legitimate interest
Marketing communications (where consented)	Registration data, preference data	Consent
Regulatory and legal compliance	All applicable categories	Legal obligation

6. Legal Basis for Processing

Tony88 processes personal data only where a valid legal basis exists under applicable data protection principles. The principal legal bases we rely upon are:

• Contract Performance: Processing necessary for the performance of the Member Agreement — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) obligations, KYC requirements, and licensing conditions.
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, abuse detection, and analytics — where our legitimate interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as direct marketing communications, where we have obtained your explicit consent. You may withdraw consent at any time by updating your notification preferences or contacting support.

7. Data Sharing & Disclosure

7.1 Third-Party Service Providers

Tony88 shares personal data with carefully selected third-party service providers who process data on our behalf under contractual data processing agreements. These providers include: payment processing gateways (handling transactions via Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, DuitNow, FPX, and other supported methods); identity verification and KYC service providers; fraud detection and security platforms; cloud hosting and infrastructure providers; and customer relationship management systems.

All third-party processors are contractually required to process personal data only for specified purposes, to maintain appropriate security standards, and to comply with applicable data protection requirements. Tony88 does not permit third-party processors to use Member data for their own commercial purposes.

7.2 Legal and Regulatory Disclosure

Tony88 may disclose personal data to competent authorities, regulators, law enforcement agencies, and courts where required or permitted by applicable law — including in response to lawfully issued orders, subpoenas, or where disclosure is necessary to prevent, detect, or prosecute financial crime or fraud.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of Tony88's assets, personal data held by the Platform may be transferred to the acquiring entity as part of the transaction. Members will be notified of any such material change in data controllership via the email address on file, and the relevant privacy policy will be updated accordingly.

7.4 No Sale of Personal Data

Tony88 does not sell, rent, lease, or otherwise commercially transfer personal data to unafiliated third parties for their own marketing or commercial purposes. This is an absolute commitment — not a caveat-laden qualification.

8. International Data Transfers

As an internationally operated online gaming platform, Tony88 may transfer personal data to, and process data in, countries outside of Malaysia and the European Economic Area. Where such transfers occur, Tony88 ensures that adequate safeguards are in place to protect transferred data, which may include: standard contractual clauses approved by relevant data protection authorities; transfers to countries recognised as providing an adequate level of data protection; or other legally recognised transfer mechanisms.

Members may request information about the specific safeguards in place for international data transfers by contacting support at the details provided in Section 16 of this Policy.

9. Data Retention

Tony88 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to applicable legal, regulatory, and contractual retention requirements. The following retention periods apply as general guide:

• Account and registration data: Retained for the duration of your membership, plus a minimum of 5 years following account closure, to satisfy AML and regulatory record-keeping obligations.
• KYC and identity verification data: Retained for a minimum of 5 years following the completion of the business relationship, in accordance with anti-money-laundering requirements.
• Financial transaction records: Retained for a minimum of 7 years following each transaction, in line with standard financial record-keeping practice.
• Gameplay and betting records: Retained for a minimum of 5 years following account closure for dispute resolution and regulatory compliance purposes.
• Support and communication records: Retained for up to 3 years following the resolution of a support interaction, for quality assurance and dispute reference purposes.
• Technical access logs: Retained for up to 12 months in an identifiable form, after which they may be anonymised for analytical purposes.

Upon expiry of applicable retention periods, personal data will be securely deleted or anonymised in accordance with our data disposal procedures.

10. Cookies & Tracking Technologies

10.1 Types of Cookies Used

Tony88 uses the following categories of cookies on its Platform:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, security tokens, and login authentication. These cannot be disabled without impairing core functionality.
• Performance & Analytics Cookies: Collect anonymised data about how Members use the Platform — including pages visited, time spent, and navigation paths — to help us improve the Platform experience. No personally identifiable information is included in analytics reports.
• Functional Cookies: Remember your preferences such as language selection, display settings, and responsible gambling tool configurations to provide a more personalised experience.

10.2 Managing Cookies

You can manage cookie preferences through your web browser settings. Most modern browsers — including those used on Android and iOS devices — provide options to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Blocking analytics or functional cookies will not prevent you from accessing the Platform but may result in a less personalised experience.

11. Data Security

Tony88 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the Tony88 servers.
• Encryption at rest for sensitive personal and financial data stored on Tony88 servers.
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security professionals.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Staff training on data protection obligations and security awareness.
• Incident response procedures for detecting, investigating, and responding to personal data breaches, including Member notification obligations where applicable.

12. Your Data Rights

Subject to applicable data protection principles and any overiding legal obligations, you have the following rights in respect of your personal data held by Tony88:

To exercise any of these rights, please contact Tony88 support using the details in Section 16. We will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where retention is required by law (such as AML or KYC retention obligations), or where data is needed to defend legal claims. We will explain any applicable limitations when responding to your request.

13. Children's Privacy

The Tony88 Platform is strictly intended for individuals aged 21 and above. Tony88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from an individual below the minimum age threshold, we will take immediate steps to delete such data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately using the details in Section 16.

14. Third-Party Links

The Tony88 Platform does not include external links to third-party websites as a matter of policy. However, in the event that any third-party content is referenced, Tony88 accepts no responsibility for the privacy practices, data security, or content of any third-party sites or services. This Policy applies solely to data processed by Tony88 in connection with the tony88.cam Platform.

15. Policy Amendments

Tony88 reserves the right to amend, update, or replace any part of this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or Platform functionality. The date of the most recent revision is displayed prominently at the top of this page.

Where changes are material — for example, where we introduce a new purpose for processing or a new category of data sharing — we will provide advance notice to registered Members via the email address on file. Your continued use of the Platform following the effective date of any material amendment constitutes your acceptance of the revised Policy.

We encourage Members to review this Policy periodically to remain informed of how Tony88 handles your personal data.

16. Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or Tony88's data processing activities, please contact our support team through the following channels:

• Live Chat: Available 24/7 via the on-Platform chat widget — available in English, Bahasa Melayu, and Mandarin. Average response time 3-5 minutes.
• Email: [email protected] (displayed as plain text — not a clickable link)

Tony88 aims to acknowledge all data-related written enquiries within 3 business days and to resolve them substantively within 30 calendar days.

If you are unsatisfied with our response to a data concern, you may have the right to lodge a complaint with the relevant supervisory authority in the jurisdiction applicable to your circumstances. We encourage Members to contact us first, as many concerns can be resolved directly and promptly through our support channels.