Privacy Policy Tuna68 — Malaysian Player Personal Data Protection

Tuna68 collects various categories of information depending on how you interact with our platform. Below is a detailed breakdown of the types of data we collect and how they are gathered:

A. Information You Provide Directly

• During registration: Full name, date of birth, Malaysian phone number, email address, password (stored in hashed form — unreadable by anyone, including tuna68 staff), and state or city of residence in Malaysia.
• During identity verification: National Identity Card (MyKad) or passport number, copies of identity documents requested for KYC (Know Your Customer) verification purposes, and proof of address where required.
• During financial transactions: eWallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) or bank account information (for FPX via Maybank2u or CIMB Clicks) used for deposits and withdrawals. tuna68 does not store credit or debit card numbers directly — all payment processing is handled through licensed third-party payment providers.
• When contacting support: The content of Live Chat conversations, emails, or other communications with the tuna68 support team, including complaints, inquiries, and feedback.

B. Automatically Collected Information

• Device and technical data: IP address, web browser type and version, operating system, screen resolution, device type (smartphone, tablet, laptop), and unique device identifier.
• Platform usage data: Pages visited, games played, session duration, in-platform actions (clicks, navigation, searches), error logs, and timestamps for each activity within your account.
• Location data: Country- and region-level location information derived from your IP address. tuna68 does not collect precise location data (GPS) without your explicit consent.
• Cookie and similar tracking technology data: As described in greater detail in Section 5 of this document.

Tuna68 uses the personal data collected for the following purposes, all of which are grounded in a valid legal basis under Malaysia's PDPA:

• Account management and identity verification: Creating and maintaining your tuna68 account, verifying your identity during registration and when required for security purposes, and enabling secure login including two-factor authentication (2FA).
• Financial transaction processing: Processing your deposits and withdrawals via your preferred Malaysian payment method (Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay, Maybank2u, CIMB Clicks), verifying transactions, and maintaining required financial records.
• Provision of gaming services: Gives you full access to all games on tuna68 — including slots, poker, Sports Betting for Malaysia Super League and EPL football, badminton, e-sports, lottery and Live Casino — and enables your winnings to be verified and credited to your account.
• Platform security and fraud prevention: Detecting and preventing fraud, hacking, money laundering, and platform abuse. This includes analyzing abnormal usage patterns, checking for multiple accounts, and monitoring suspicious transactions.
• Customer support: This enables the tuna68 support team to assist you effectively in Bahasa Melayu when you contact us via Live Chat or email.
• Important service communications: Sending account-related notifications such as deposit confirmations, withdrawal notifications, security alerts, terms updates, and lottery win notifications. These communications cannot be opted out of as they are essential to the security and operation of your account.
• Marketing and promotions (with your consent): If you have consented to receive marketing communications, we will send you information about the latest bonus offers, new games, special promotions, and tuna68 events. You may withdraw this consent at any time.
• Legal compliance: Fulfilling our obligations under applicable Malaysian law, including reporting requirements, cooperation with legitimate authority investigations, and compliance with regulatory body directives.
• Platform improvements: Analysing usage data in aggregate (without identifying individuals) to improve the design, performance and user experience of the tuna68 platform.

Tuna68 does not use your data to make automated decisions that significantly affect you (profiling that determines your terms of service) without human involvement in the decision-making process.

Tuna68 does not sell, rent, or disclose your personal data to third parties for their own marketing purposes. However, there are limited situations where your data may be shared with the following parties:

• Trusted third-party service providers: tuna68 works with selected service providers that help us operate the platform — including licensed MYR payment processors, internationally licensed game software providers, identity verification (KYC) service providers, and server infrastructure providers. All these providers are bound by strict confidentiality agreements and are only permitted to use your data for the specific purposes agreed upon with tuna68.
• Legal compliance and authorities: tuna68 may be required to disclose your personal data to Malaysian authorities — such as the police, the anti-corruption commission, or financial regulatory bodies — if mandated by law, court order, or a legitimate official investigation. tuna68 will notify you of any such disclosure unless prohibited from doing so by law or a confidentiality order.
• Business transfers: If tuna68 is involved in a merger, acquisition, or asset sale, user data may be transferred as part of those assets. In such cases, members will be notified in advance and the same or a stricter Privacy Policy will continue to apply.
• With your explicit consent: tuna68 may share your data with other parties in specific situations where you have provided explicit consent for that sharing in advance.

Tuna68 implements multiple layers of technical and organisational security controls to protect your personal data from unauthorised access, alteration, disclosure or destruction:

• Transmission encryption: All communications between your browser and tuna68's servers are secured with the latest TLS (Transport Layer Security) protocol, using SSL 256-bit certificates. This means data transmitted — including passwords, account information and transaction details — cannot be intercepted and read by unauthorised parties.
• Storage encryption: Sensitive data including passwords is stored using strong one-way cryptographic hashing algorithms — meaning even tuna68 staff cannot read your password in its original form. Sensitive financial data is stored with additional encryption at the database level.
• Role-based access controls: Access to user data within tuna68's systems is restricted to staff who require that information to carry out their duties. All access is recorded in audit logs, and any unauthorised access is detected and reported immediately.
• Two-factor authentication (2FA): tuna68 offers and encourages the use of 2FA on user accounts to add an extra layer of protection — ensuring that only you can access your tuna68 account, even if your password is compromised.
• Continuous security monitoring: tuna68's security team monitors the platform 24/7 to detect suspicious activity, intrusion attempts, and system anomalies. Any security incidents are handled in accordance with established incident response procedures.
• Regular security audits: tuna68 conducts regular security reviews and system audits, including penetration testing by independent security experts, to identify and address any security vulnerabilities before they can be exploited.

While tuna68 takes all reasonable steps to protect your data, no security system can be guaranteed 100% safe from every threat. You also play an important role in your account's security by using a strong and unique password, enabling 2FA, and never sharing your login credentials with anyone.

Tuna68 uses cookies and similar tracking technologies to ensure the platform functions properly, enhance the user experience, and analyse platform usage. Below is an explanation of the types of cookies we use:

Types of Cookies at Tuna68

• Essential cookies (required): These cookies are essential for the tuna68 platform to function properly. They include session cookies that maintain your logged-in status, security cookies that prevent CSRF (Cross-Site Request Forgery) attacks, and cookies that store your language preferences. These cookies cannot be disabled — without them, the platform will not function.
• Analytics cookies: These cookies help tuna68 understand how users interact with the platform — which pages are visited most, which games are popular, where users typically drop off, and more. This data is used in aggregate form to improve the platform. tuna68 uses analytics solutions hosted on our own servers to minimise data exposure to third parties.
• Preference cookies: These cookies store your preferences — such as display theme, notification settings, preferred language and other settings you have configured in your tuna68 account — to ensure a consistent experience every time you use the platform.
• Security cookies: Additional cookies used by tuna68's security systems to identify suspicious sessions, detect abnormal repeated login attempts, and protect your account from malicious activity.

You can manage cookie usage through your web browser settings. However, disabling essential cookies may affect the functionality of the tuna68 platform. For information on how to manage cookies in your browser, please refer to your browser's help documentation.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by tuna68:

To exercise any of the rights above, please contact the tuna68 support team at support@tuna68.best stating your request type and account details. tuna68 may require identity verification before processing certain requests to ensure the security of your data.

Tuna68 retains your personal data only for as long as it is needed for the purposes stated in this Privacy Policy or as required by applicable Malaysian law. The following is a general guide to retention periods for different categories of data:

• Active account data: For as long as your account remains active with tuna68. This data is retained to enable you to use our services and for us to provide effective customer support.
• Financial records and transactions: Minimum 7 years from the date of the transaction, in line with Malaysian legal requirements relating to anti-money laundering and financial reporting. These records may need to be retained longer if they are relevant to an ongoing investigation or legal proceedings.
• Customer support communication logs: 3 years from the date of communication, to allow for the resolution of disputes that may arise later and for service quality improvement.
• Identity Verification (KYC) Data: Minimum 5 years from the date of verification or account closure, whichever is later, in line with legal compliance requirements.
• Cookies and session data: Session cookies are deleted when you close your browser. Persistent cookies are set for a period of between 30 days and 1 year, depending on the type and purpose of the cookie.
• Security log data: 12 months for routine activity logs; up to 5 years for logs related to suspected or confirmed security incidents.

When data is no longer needed and there is no legal obligation to retain it, tuna68 will delete or anonymise that data securely using established data deletion procedures.

Tuna68 strictly prohibits the use of its platform by anyone under the age of 18. This platform is designed for adults only, and we take our responsibility to protect minors very seriously.

Tuna68 does not knowingly collect personal data from individuals under the age of 18. All registration applicants are required to confirm they are 18 or older, and tuna68 conducts additional age verification checks as part of our KYC (Know Your Customer) process.

If tuna68 discovers that personal data of a child under 18 has been collected without our knowledge, the account will be immediately closed, all associated data will be deleted as soon as possible, and any valid remaining balance (if applicable) will be returned to the original payment method in accordance with established procedures.

If you believe tuna68 may have inadvertently collected data from a child, please contact us immediately at support@tuna68.best so we can take the necessary action without delay.

Tuna68 reserves the right to review and update this Privacy Policy from time to time to reflect changes in our data processing practices, evolving legal requirements, or the addition of new services. When material changes are made to this policy, tuna68 will notify you via one or more of the following methods:

• In-platform notifications when you log in to your tuna68 account after an amendment takes effect.
• Notification emails sent to the email address registered with your account.
• Updating the "Last Updated" date at the top of this document.

We encourage you to revisit this Privacy Policy page periodically. The latest version is always accessible at tuna68.best/privacy-policy. Continued use of the tuna68 platform after an amendment takes effect will be considered acceptance of the updated policy.

If you have any questions, concerns, or complaints about how tuna68 handles your personal data, or if you wish to exercise any of your rights as a data subject, there are several ways to get in touch with us:

• Privacy email: Send an email to support@tuna68.best with the subject line "Data Privacy Enquiry", along with your request details and your tuna68 account number (if applicable). Our team will respond within 3–5 business days for privacy-related requests.
• In-platform Live Chat: For immediate privacy enquiries, you can reach the tuna68 support team via Live Chat, available 24/7 in Bahasa Melayu. Please indicate that your enquiry relates to the Privacy Policy or personal data so it can be directed to the appropriate staff.

Tuna68 aims to resolve all privacy-related complaints and enquiries within 14 business days. For more complex complaints requiring further investigation, we will keep you updated on the progress of your case and provide a more accurate estimated resolution time.