Tony99 Privacy Policy

Introduction

This Privacy Policy describes how Tony99 collects, uses, stores, shares and protects personal data obtained from users who access or use the Tony99 platform, including its website, account system, casino games, sports betting functions, payment services and customer support channels.

Tony99 serves adult users across Malaysia, including players in Kuala Lumpur, Petaling Jaya, Penang, Johor Bahru and Shah Alam. We recognise that personal data entrusted to us must be handled responsibly, proportionately and in accordance with our published commitments. Where applicable law imposes additional obligations, those obligations take precedence.

This Policy should be read alongside the Tony99 Terms & Conditions. Defined terms used in the Terms & Conditions carry the same meaning here unless otherwise stated.

Definitions

Data We Collect

Tony99 collects information provided by you directly during registration, verification, account management and support interactions, as well as information generated through your use of the platform.

3.1 Registration and identity data

• Full legal name and date of birth.
• Residential address, including city or state within Malaysia.
• Contact details such as email address and phone number.
• Government-issued identity documents submitted for KYC purposes, which may include a Malaysian MyKad, driver's licence or passport.
• Proof of address documentation, such as a recent utility bill or bank statement.
• Selfie images submitted during identity verification steps.

3.2 Financial and payment data

• Payment channel details sufficient to process deposits and withdrawals, including details associated with Maybank, CIMB, Public Bank, Hong Leong, DuitNow, FPX, Touch 'n Go eWallet, Boost, GrabPay, and crypto wallet addresses for Bitcoin, USDT and ETH transactions.
• Transaction history including deposit amounts, withdrawal requests, bonus transactions and game stakes.
• Source-of-funds information where required for compliance reviews.

3.3 Technical and usage data

• IP address, device type, operating system and browser information.
• Session durations, pages visited, game activity and sports markets accessed.
• Geolocation data at the country or region level where applicable.
• Cookie identifiers and similar tracking information as described in Section 7.

3.4 Support and communication data

• Messages exchanged with customer support, including live chat transcripts and email correspondence.
• Records of complaints, disputes and outcomes.

How We Use Your Data

Tony99 processes personal data for the following purposes. We collect the minimum data necessary for each purpose and do not retain information beyond the applicable retention period described in Section 8.

Legal Basis for Processing

Tony99 relies on one or more of the following lawful grounds when processing personal data:

• Contractual necessity: Processing required to perform the account agreement, such as verifying identity, crediting deposits and settling withdrawals.
• Legal obligation: Processing required to comply with applicable anti-money-laundering, age verification, record-keeping and other regulatory requirements.
• Legitimate interests: Processing necessary to operate the platform securely, prevent fraud, investigate abuse and improve services, provided such interests do not override your fundamental rights.
• Consent: Where consent is the stated basis, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of prior processing.

Data Sharing and Disclosure

Tony99 does not sell, rent or trade personal data. Data may be shared in the following limited circumstances:

6.1 Service providers

Identity verification providers, payment processors, fraud prevention services, cloud hosting providers and customer support platforms may process data on Tony99's behalf under appropriate data processing agreements. These providers are permitted to use data only for the specific purpose for which it was shared.

6.2 Legal and regulatory disclosure

Tony99 may disclose personal data to law enforcement, regulatory bodies, financial intelligence units or courts where required by applicable law, a valid legal process or a legitimate request from an authority with jurisdiction over Tony99's operations.

6.3 Business continuity

In the event of a merger, acquisition or restructuring, personal data may form part of the transferred assets, subject to equivalent privacy protections for affected users.

6.4 Aggregated data

Tony99 may share anonymised, aggregated statistical data that cannot reasonably identify any individual. Such data may be used for internal analysis, industry benchmarking or platform improvement purposes.

Cookies and Tracking Technologies

Tony99 uses cookies and similar technologies to maintain session state, prevent repeated logins, analyse traffic patterns and support platform security. Cookies do not contain game outcomes or full payment details.

The following categories of cookies may be used:

• Essential cookies: Required for login sessions, account security and basic platform functionality. These cannot be disabled without disrupting service.
• Functional cookies: Store preferences such as language and display settings to improve your experience across sessions.
• Analytical cookies: Collect anonymised data about page visits, session durations and feature usage to support platform improvements.

Browser settings can be adjusted to block or delete cookies. Blocking essential cookies may prevent login or normal account operation. Where cookie consent controls are presented on the platform, your selections will be respected.

Data Retention

Tony99 retains personal data only for as long as reasonably necessary to fulfil the purpose for which it was collected, plus any additional period required by applicable legal, regulatory or record-keeping obligations.

Transaction records, identity documents and compliance-related information are generally retained for a minimum period following account closure to satisfy anti-money-laundering requirements. Support communications are retained for a reasonable operational period to enable dispute resolution and service continuity. Technical logs are retained for shorter periods consistent with security monitoring purposes.

When retention is no longer required or legally justified, personal data is deleted or anonymised using appropriate methods so that it can no longer be attributed to an individual.

Your Rights

Subject to applicable law and any overriding legal obligation, you may exercise the following rights in relation to your personal data held by Tony99:

• Right of access: Request a copy of the personal data Tony99 holds about you.
• Right of rectification: Request correction of inaccurate or incomplete personal data.
• Right of erasure: Request deletion of personal data where it is no longer necessary, where consent has been withdrawn and no other legal basis applies, or where processing is unlawful.
• Right to restrict processing: Request that Tony99 limits how it uses your data in certain circumstances, such as while the accuracy of data is contested.
• Right to data portability: Request a copy of personal data you provided in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interests where your circumstances justify doing so.

Requests should be submitted to Tony99 customer support using the contact details in Section 13. We will verify your identity before processing a request and will aim to respond within a reasonable timeframe. Some requests may be subject to exceptions where legal retention obligations or ongoing compliance requirements apply.

Data Security

Tony99 implements technical and organisational measures proportionate to the sensitivity of the data processed. These include encrypted data transmission via SSL, access-controlled server environments, internal access restrictions based on role necessity, ongoing monitoring for anomalous activity, and staff awareness of data handling requirements.

No transmission over the internet or method of electronic storage can be guaranteed entirely secure. Tony99 will notify affected users where a data breach creates a material risk to individual rights, in accordance with applicable legal requirements.

You are responsible for maintaining the confidentiality of your account credentials. Do not share your password, use a unique password for Tony99, and contact support immediately if you suspect unauthorised access to your account.

Age Restrictions and Minors

Tony99 is strictly an adult-only platform. Accounts are open only to persons aged 21 and above. Tony99 does not knowingly collect personal data from individuals below this age. If we become aware that an account belongs to a person under 21, the account will be closed, any deposits returned subject to applicable checks, and associated data handled in accordance with the relevant legal basis for retention.

Adults who are responsible for minors are encouraged to use device-level parental controls and content filtering tools to prevent underage access to gambling platforms.

Changes to This Privacy Policy

Tony99 may update this Privacy Policy to reflect changes in the services offered, payment methods supported, applicable legal requirements or internal data practices. The revised Policy will be published on this page with an updated effective date. Material changes may also be communicated to registered account holders through the platform interface.

Continued use of Tony99 after a revised Policy takes effect constitutes acceptance of the changes. If you do not accept any update, please discontinue use and contact support to request account closure after withdrawing any eligible balance.

Contact Us

For privacy-related questions, data subject requests or complaints about how Tony99 handles personal data, please contact our customer support team. Please include your registered username, the nature of your request and any relevant reference information. Do not include your password or full identity document numbers in your initial message.