Tony99 Privacy Policy — Your Data Is Protected
Fully, At All Times

1. Introduction

This Privacy Policy ("Policy") describes how Tony99 ("we", "the platform" or "Tony99") collects, uses, discloses, stores and protects your personal information when you use our platform, accessible via tony99.xyz and all related subdomains.

Tony99 operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable privacy laws. We take member privacy seriously — not merely as a legal obligation, but because your trust is the foundation of our relationship.

This policy applies to all users of the Tony99 platform — whether you are browsing our website, registering as a new member, making a deposit, playing slots, Live Casino, baccarat, roulette, or Sports Betting, or simply contacting our support team.

2. Personal Data We Collect

Tony99 collects various types of data depending on how you interact with our platform. The following are the categories of data that may be collected:

Tony99 does not collect sensitive data such as health information, religious beliefs, political views or biometric data unless specifically required for legal compliance purposes and with your explicit consent.

3. How We Collect Data

Your personal data is collected through various channels as you interact with the Tony99 platform:

• Account registration: Information you provide in the Tony99 registration form — phone number, username, and password.
• Identity verification: Documents you upload during the KYC (Know Your Customer) process, which may be required for withdrawals that exceed certain limits.
• Financial Transactions: Information transmitted automatically when you make a deposit via DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks or FPX.
• Platform activity: Data generated automatically while you use the platform — games you play, bets you place, and the duration of your sessions.
• Cookie technology: Cookies and tracking technologies that help us understand how you use the Tony99 platform for continuous improvement purposes.
• Support communications: Information you provide when contacting the Tony99 support team via live chat or email.
• Device data: Technical information automatically transmitted by your device and browser when you access the Tony99 platform.

4. Purposes of Personal Data Use

Tony99 uses collected personal data solely for legitimate purposes directly related to the operation of the platform. The purposes are as follows:

• Creating and managing your Tony99 member account, including identity verification and age verification.
• To securely process your deposits and winnings withdrawals via registered Malaysian payment methods.
• Providing effective customer support — the Tony99 team requires access to your account information to help resolve any issues you encounter.
• Monitors platform activity to detect and prevent fraud, bot usage, account hacking and other breaches of our terms that compromise the safety of all members.
• To comply with legal obligations under Malaysia's PDPA, anti-money laundering (AML) laws, and the requirements of relevant financial regulatory authorities.
• Sending account-related notices — including transaction confirmations, security alerts, terms updates, and promotional information (where you have consented to receive them).
• Improving the Tony99 platform based on aggregated, anonymised usage pattern analysis to enhance the experience for all members.
• Supporting Tony99's responsible gaming programme — game history data is used to identify patterns that may require intervention or support.

5. Sharing Data With Third Parties

Tony99 does not sell or rent member personal data to any third party. However, under limited and specific circumstances, Tony99 may need to share data with the following parties for legitimate operational purposes:

• Payment processors: Financial institutions and payment gateway providers involved in processing your deposits and withdrawals — including DuitNow, Touch 'n Go eWallet, GrabPay, Boost, ShopeePay and FPX providers. This sharing is limited to the data necessary to complete the transaction.
• Technical service providers: Third parties that provide the technical infrastructure for the Tony99 platform — such as cloud computing, cybersecurity, and analytics services. All such parties are bound by strict confidentiality and data protection agreements with Tony99.
• Game providers: Game providers such as Pragmatic Play and PG Soft may receive the minimum technical data required to deliver gaming services — for example, an anonymised session ID. They do not receive your full personally identifiable information.
• Legal authorities: Tony99 will disclose data to Malaysian authorities when required by a court order, regulatory directive, or applicable law — including investigations relating to anti-money laundering legislation.
• Business transfers: If Tony99 is involved in a merger, acquisition or asset sale, member data may be transferred as part of that transaction — members will be notified in advance before their data becomes subject to a different privacy policy.

In all of the above cases, Tony99 ensures that data sharing is kept to the minimum necessary, serves a legitimate purpose, and is subject to adequate contractual safeguards to protect members' interests.

6. Data Security Measures

Tony99 implements multiple layers of technical and operational security to protect your personal data from unauthorised access, disclosure, alteration or destruction:

• 256-bit SSL Encryption: All communications between your device and Tony99's servers are encrypted using TLS protocol with 256-bit encryption — the same standard used by Malaysia's major banks.
• Encryption of data at rest: Sensitive data stored in Tony99's databases is also encrypted to protect it from unauthorised access, even in the event of a physical server breach.
• Internal access controls: Only Tony99 staff who require access to specific data in order to carry out their duties are permitted to access it, with a full audit log maintained for every access.
• Continuous security monitoring: Tony99's systems are monitored around the clock by our cybersecurity team for unusual activity, intrusion attempts and security vulnerabilities.
• Regular security audits: Tony99 conducts regular security audits and penetration testing by accredited independent parties to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication (2FA): 2FA is available to all Tony99 members as an added layer of security to protect your account from unauthorized access.

7. Data Retention Period

Tony99 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy, or for as long as required by Malaysian law. The data retention guidelines are as follows:

• Active account data: Retained for the duration your Tony99 account remains active and for 7 years after account closure for legal compliance purposes.
• Financial transaction records: Retained for a minimum of 7 years in accordance with Malaysian accounting, tax and anti-money laundering legal requirements.
• Security logs: System and security logs are retained for 90 days for the purposes of security incident and fraud investigations.
• Customer support data: Live chat transcripts and support emails are retained for 2 years for service quality purposes and as a reference in the event of any subsequent disputes.
• Gaming history data: Retained for the duration of the active account and 5 years after closure for compliance and responsible gambling purposes.
• Cookie data: Depends on the cookie type — session cookies are deleted when the browser is closed, while persistent cookies have varying expiry periods (typically 30 days to 1 year).

When data is no longer needed and there is no legal obligation to retain it, Tony99 will delete or anonymise that data securely and irreversibly.

8. Your Rights as a Data Owner

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding your personal data, all of which Tony99 fully respects:

• Right of access: You have the right to know what personal data Tony99 holds about you and to request a copy of that data.
• Right to rectification: If your data is inaccurate or incomplete, you have the right to request that Tony99 correct it. You may also update certain information directly within your account settings.
• Right to erasure: Under certain circumstances, you may request that Tony99 delete your personal data — subject to any applicable legal retention obligations.
• Right to restriction of processing: You may request that Tony99 restrict the processing of your data under certain circumstances — for example, while a dispute over data accuracy is being resolved.
• Right to object: You have the right to object to the processing of your data for specific purposes, such as direct marketing.
• Right to withdraw consent: Where data processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

9. Cookies & Tracking Technologies

The Tony99 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following types of cookies are used:

• Essential Cookies — Required for core Tony99 platform functions such as login authentication, session management, and security. These cookies cannot be disabled as they are essential for the platform to operate.
• Functional Cookies — Remembers your preferences such as language, display settings and favourite games for a more personalised experience on Tony99.
• Analytical Cookies — Collects information about how you use the Tony99 platform in aggregate, anonymised form to help us understand usage patterns and make improvements.
• Security Cookies — Helps us detect suspicious activity, prevent unauthorised access and protect your Tony99 account from hacking attempts.

You can manage cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the Tony99 platform — particularly essential cookies required for login and session security.

10. Children's Data

The Tony99 platform is for adult users aged 18 and above only. Tony99 does not knowingly collect or process personal data from individuals under the age of 18.

If we find that we have inadvertently collected personal data from underage individuals, we will take immediate steps to delete that data and terminate the account in question.

11. Third-Party Links

The Tony99 platform may contain links to third-party websites or services in certain contexts — for example, links to game providers or responsible gambling organisations. Tony99 is not responsible for the privacy practices of those third-party websites.

We encourage you to read the privacy policy of any third-party website you visit from the Tony99 platform. This Privacy Policy applies solely to the Tony99 platform and does not cover any external websites or services.

12. Changes to the Privacy Policy

Tony99 reserves the right to update this Privacy Policy from time to time in line with changes in law, technology, or platform operations. When a material change occurs:

• Tony99 will display a clear notice on the platform regarding any such changes at least 14 days before they take effect.
• The "Updated" date at the top of this document will be revised to reflect the date of the most recent changes.
• For highly material changes that significantly affect your rights, Tony99 will send a direct notice to members via email or SMS to the registered phone number.

Continued use of the Tony99 platform after the effective date of any Privacy Policy changes will be considered acceptance of the amended terms. We encourage you to review this page periodically.

13. Contact Us About Privacy

If you have any questions, concerns, or requests regarding Tony99's Privacy Policy or your personal data, please contact us via:

• Live Chat: Available 24/7 directly on the Tony99 platform — the fastest way to get an immediate response from our team.
• Privacy Email: support@tony99.xyz — for written requests relating to your privacy rights, data correction or data deletion.

Tony99 will respond to all privacy-related enquiries within 30 business days. For complex requests such as full data export requests, this period may be longer, but we will keep you informed of the progress of your request on a regular basis.