tony99 Privacy Policy

01 Introduction

tony99 ("tony99", "we", "us", "our") operates the online casino and sportsbook platform accessible at https://tony99.one. We are committed to protecting the privacy and personal data of all users of our platform, including registered members, prospective members, and visitors to our website.

This Privacy Policy ("Policy") describes how tony99 collects, uses, stores, shares, and protects personal data in connection with the provision of our services. It applies to all personal data we process about individuals who interact with the tony99 platform, whether through account registration, gameplay, financial transactions, customer support interactions, or general website browsing.

This Policy should be read in conjunction with the tony99 Terms and Conditions, which govern your use of the platform as a whole. In the event of any inconsistency between this Policy and the Terms and Conditions with respect to data privacy matters, this Policy shall take precedence.

02 Data Controller

For the purposes of applicable data protection legislation, tony99 is the data controller in respect of the personal data you provide to us or that we collect about you through your use of the Platform. As data controller, tony99 determines the purposes and means of processing your personal data.

If you have questions about how tony99 processes your personal data, or wish to exercise any of your data subject rights as described in this Policy, you may contact us via the details set out in Section 14 of this Policy.

03 Personal Data We Collect

tony99 collects the following categories of personal data in connection with the provision of our services:

• Identity Data: Full legal name, date of birth, nationality, and copies of identity documents (such as MyKad, passport, or driver's licence) provided during account verification.
• Contact Data: Email address and residential address.
• Account Data: Username, account number, account registration date, login history, and account settings preferences including responsible gaming configurations.
• Financial Data: Deposit and withdrawal transaction records, payment method identifiers (such as masked bank account numbers or eWallet identifiers), and MYR balance history. tony99 does not store full payment card or bank account numbers.
• Transaction & Gaming Data: Records of all bets, wagers, game sessions, bet amounts, outcomes, and bonus usage. This data is retained for regulatory compliance and responsible gaming monitoring purposes.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, session duration, and pages visited on the Platform.
• Communications Data: Records of your interactions with tony99 customer support, including live chat transcripts and email correspondence, where relevant to account management or dispute resolution.
• Marketing Preferences: Your expressed preferences regarding receipt of promotional communications from tony99.

We do not knowingly collect special categories of personal data (such as health data, racial or ethnic origin, political opinions, or biometric data) unless specifically required for regulatory compliance purposes and with your explicit consent.

04 How We Collect Personal Data

tony99 collects personal data through the following means:

• Direct submission: Data you provide directly to tony99 during account registration, identity verification, deposit and withdrawal requests, customer support interactions, or when completing any other form on the Platform.
• Automated collection: Technical and usage data collected automatically when you access and use the tony99 Platform, through cookies, server logs, and similar tracking technologies as further described in Section 9.
• Third-party payment providers: Confirmation data received from payment processing partners (including Touch n Go eWallet, Boost, FPX, and bank partners including Maybank, CIMB, and Public Bank) in connection with deposit and withdrawal processing. We receive only the minimum data necessary to confirm and record transactions.
• Identity verification services: Where we use third-party identity verification providers to carry out Know Your Customer (KYC) checks required under our licensing obligations, those providers may return verification results to tony99.
• Publicly available sources: In limited circumstances, for fraud prevention or compliance purposes, tony99 may cross-reference data against publicly available sources such as sanctions lists or adverse media databases.

05 Purpose and Legal Basis for Processing

tony99 processes your personal data only for legitimate purposes and on one or more of the following legal bases:

• Performance of a contract: Processing your registration data, managing your account, processing deposits and withdrawals, and operating game and betting services — all necessary to provide the services you have contracted with tony99 to receive.
• Legal obligation: Identity verification (KYC), anti-money laundering (AML) and counter-terrorist financing (CTF) checks, age verification, record-keeping for regulatory purposes, and compliance with any lawful request from a competent authority.
• Legitimate interests: Fraud detection and prevention, platform security, responsible gaming monitoring, improving Platform performance and features, and communicating service-related updates to members.
• Consent: Sending you marketing communications about tony99 promotions, new features, or products where you have expressly opted in to receive such communications. You may withdraw this consent at any time.

06 Data Sharing and Disclosure

tony99 does not sell, rent or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers: To process deposits and withdrawals through your chosen payment method. These providers are bound by their own data protection obligations.
• Identity and fraud verification providers: To carry out mandatory KYC, AML and age verification checks required by our licensing authority.
• Game content providers: Game providers whose titles are accessible through tony99 receive limited technical session data necessary to operate the games. These providers are contractually prohibited from using that data for any other purpose.
• IT and hosting service providers: Cloud infrastructure and technology providers who host and maintain the tony99 Platform under strict data processing agreements.
• Regulatory and law enforcement authorities: Where tony99 is legally required or permitted to disclose data — for example, pursuant to a court order, regulatory request, or our anti-money laundering reporting obligations.
• Responsible gaming support organisations: In limited circumstances and where permitted by applicable law, aggregated or anonymised data may be shared with responsible gambling research or support bodies.

All third parties who process personal data on behalf of tony99 are bound by contractual data processing agreements that require them to process data only as instructed by tony99 and in accordance with applicable data protection law.

07 International Data Transfers

tony99 operates in an international environment and some of our service providers and infrastructure may be located outside Malaysia. Where personal data is transferred outside Malaysia, tony99 takes steps to ensure that an adequate level of protection is in place, including through the use of standard contractual clauses, data processing agreements, or other appropriate transfer mechanisms recognised under applicable data protection law.

By using the tony99 Platform, you acknowledge and consent to the transfer of your personal data to servers and systems that may be located outside Malaysia, subject to the safeguards described in this Policy.

08 Data Retention

tony99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting or reporting requirements.

Specifically:

• Account and identity data is retained for the duration of your account membership and for a minimum of five (5) years following account closure, in compliance with AML and KYC regulatory record-keeping requirements.
• Transaction and gaming history records are retained for a minimum of five (5) years for regulatory compliance purposes.
• Customer support communications are retained for up to two (2) years unless they relate to an ongoing dispute or legal matter, in which case they are retained until resolution.
• Marketing preference data is retained until you withdraw consent or close your account, whichever is earlier.
• Technical and log data is typically retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

09 Cookies and Tracking Technologies

tony99 uses cookies and similar technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including maintaining your login session and security tokens. These cannot be disabled without impairing Platform functionality.
• Preference cookies: Store your language, display and notification preferences to personalise your experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how members use the Platform — including pages visited, session duration, and feature usage — to help us improve Platform performance and user experience.

tony99 does not use third-party behavioural advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings, though disabling essential cookies will impair your ability to use the Platform.

10 Your Data Rights

Subject to applicable law and certain exceptions, you have the following rights in respect of your personal data held by tony99:

• Right of access: You may request a copy of the personal data tony99 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to overriding legal retention obligations, particularly our KYC and AML record-keeping requirements.
• Right to restrict processing: You may request that we limit the processing of your personal data in specific circumstances.
• Right to object: You may object to processing of your personal data carried out on the basis of legitimate interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact tony99 via live chat or at [email protected]. We will respond to all verifiable requests within thirty (30) days. We may ask you to verify your identity before processing a data rights request.

11 Children's Privacy

The tony99 Platform is strictly for individuals aged 21 years and above. tony99 does not knowingly collect, process or retain personal data relating to persons under the age of 21. Age verification is a mandatory step in the registration process.

If tony99 becomes aware that personal data has been collected from an individual under 21 years of age without verified parental consent, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the tony99 Platform, please contact our support team immediately.

12 Security Measures

tony99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and tony99 servers.
• Encryption of sensitive data fields at rest.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security assessments and vulnerability testing.
• Additional device verification steps for new login locations.
• Monitoring systems designed to detect and respond to anomalous access patterns.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, tony99 will notify affected members and relevant regulatory authorities in accordance with applicable data protection law.

13 Updates to This Policy

tony99 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will notify registered members via the email address on file and post the updated Policy on this page with a revised effective date.

Your continued use of the tony99 Platform following notification of a material change constitutes your acceptance of the revised Policy. If you do not accept the updated Policy, you must cease using the Platform and contact our support team to close your account.

14 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or tony99's data practices, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly within the tony99 platform.
• Email: [email protected]
• Response time: We aim to acknowledge all privacy-related enquiries within 5 business days and to resolve them within 30 days.

Where you believe that tony99 has not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.