Tuna68 Privacy Policy – Personal Data Protection for Malaysian Users

1. Introduction & tuna68's Privacy Commitment

Tuna68 ("we", "Platform") takes the protection of its members' personal data very seriously. This Privacy Policy explains in detail how we collect, use, store, protect, and in certain circumstances share your personal information when you use the tuna68 platform at tuna68.bio.

This document has been prepared to comply with the requirements of Personal Data Protection Act 2010 (PDPA) Malaysia and reflects tuna68's commitment to transparency in all matters relating to user data. We believe that the trust of our members is our most valuable asset, and the way we handle your data is a direct reflection of that trust.

This policy applies to all tuna68 platform users without exception — including those who browse the site without registering, active registered members, and those who have closed their accounts but whose data is still retained within the period prescribed by law.

2. Types of Personal Data We Collect

Tuna68 collects various types of personal information depending on how you interact with our platform. Below are the categories of data we collect, along with their explanations:

A. Identity Data

• Full name as stated on your Malaysian identity card;
• Date of birth for age verification (minimum 18 years);
• National identity card number (MyKad) — collected only when identity verification is required;
• Current residential address;
• Nationality.

B. Contact Data

• An active email address used at registration;
• An active Malaysian mobile number;
• Your preferred username on the tuna68 platform.

C. Financial Data

• Deposit and withdrawal records in MYR (RM);
• Payment methods used — Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX (Maybank2u, CIMB Clicks);
• Transaction history within your tuna68 account;
• Bank account or e-wallet details (for withdrawal verification purposes only).

D. Platform Activity Data

• Sports betting history — football, badminton, cricket, e-sports, and more;
• Casino and Live Casino game history;
• Account balance, claimed bonuses, and rollover status;
• Login and logout timestamps on the platform.

E. Technical Data

• IP address of the device used;
• Device type, operating system, and web browser;
• Cookie data and other tracking technologies (see Section 8);
• General geolocation data (state-level only, not precise coordinates).

3. How We Collect Your Personal Data

Tuna68 collects your personal information through the following channels:

Directly from You:

• The new account registration form on tuna68;
• Profile update and account information forms;
• The identity verification (KYC) process where required;
• Customer support requests submitted via live chat or email;
• Participation in promotions, contests, or surveys.

Automatically During Platform Use:

• Activity logs of bets and games placed through the tuna68 system;
• Financial transaction records processed through the platform;
• Technical data relating to your device and internet connection;
• Cookie data and website tracking technologies.

From Trusted Third Parties:

• Identity verification service providers for KYC purposes;
• Malaysian payment processors and e-wallet providers such as Touch 'n Go eWallet and GrabPay for transaction verification;
• Fraud detection service providers to protect the security of your account.

4. How We Use Your Personal Data

Tuna68 uses collected personal data solely for legitimate and transparent purposes. We do not process your data beyond what is necessary for the following:

You may withdraw your consent to receive marketing communications at any time without affecting any other services you receive from tuna68. Contact us at support@tuna68.bio or use the unsubscribe option in any promotional email you receive.

5. Sharing Data with Third Parties

Tuna68 does not sell or rent your personal data to any third party. We only share your information in the following limited circumstances:

Selected Service Providers: tuna68 works with trusted companies to support the operation of our platform. These include:

• Malaysian payment processors and e-wallet providers (Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, FPX) — to process your deposit and withdrawal transactions in RM;
• Identity verification providers — for KYC requirements and fraud prevention;
• Cloud and data hosting providers — to securely store and maintain platform data;
• Analytics software providers — to help us understand how the platform is used (in aggregated, anonymised form).

All third-party service providers are bound by strict data protection agreements and are only permitted to use your data for the specified purposes.

Legal Obligation: tuna68 may be required to disclose your personal information to the relevant authorities if:

• Required by a court order or a lawful directive from a competent Malaysian authority;
• Required to comply with legal obligations such as anti-money laundering legislation;
• Required to protect the rights, property, or safety of tuna68 and its members.

6. Data Security Measures

Tuna68 takes a serious investment in security infrastructure to protect your personal data against unauthorised access, use, disclosure, alteration, or destruction.

The technical security measures we employ include:

• 256-bit SSL/TLS Encryption for all data communications between your device and tuna68 servers;
• Data encryption at rest for all sensitive information stored in our databases;
• Multi-layer access control — only tuna68 staff who genuinely require access are permitted to view specific data;
• Two-factor authentication (2FA) available to all tuna68 member accounts;
• Continuous security monitoring — our systems are monitored around the clock to detect any suspicious activity;
• Regular penetration testing conducted by independent security experts to identify and remediate vulnerabilities;
• Data backups performed on a regular basis to ensure service continuity and disaster recovery.

While tuna68 implements all reasonable security measures, no security system can be guaranteed to be 100% secure. We encourage you to also play your part in protecting your account by using a strong password, not sharing your login credentials, and notifying us immediately if you suspect any unauthorised activity on your tuna68 account.

7. Data Retention Period

Tuna68 retains your personal data only for as long as necessary to fulfil the original purpose of collection and to meet relevant legal obligations. The following is a general guide to our data retention periods:

• Active account data: Retained for the duration your tuna68 account remains active, plus a specified period following account closure;
• Financial transaction records: Retained for a minimum of 7 years as required under Malaysian financial and tax legislation;
• Identity verification (KYC) records: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, as required under anti-money laundering legislation;
• Customer support communication logs: Retained for 2 years from the date of the last interaction;
• Cookie and analytics data: Retained for the duration of the session or a maximum of 13 months, depending on the cookie type.

Once the applicable retention period has expired, tuna68 will securely delete or anonymise your data in accordance with established procedures. Anonymised data can no longer be linked to you personally and may be retained for platform statistical and analytical purposes.

8. Cookies, Logs & Tracking Technologies

Tuna68 uses cookies and similar tracking technologies to enhance your experience on our platform, understand how the platform is used, and deliver more relevant content.

Types of Cookies We Use:

• Essential Cookies: Required for core platform functions such as login, session security, and the betting slip. These cookies cannot be disabled without affecting platform functionality;
• Performance Cookies: Collects information about how you use tuna68 — pages visited, time spent, and errors encountered. This information is used in aggregated form to improve the platform;
• Functional Cookies: Stores your preferences such as language, display settings, and login details to make repeat visits more convenient;
• Analytics Cookies: Helps us understand traffic patterns and user behaviour on tuna68 for the purpose of continuous improvement.

You can manage cookie settings through your web browser. However, disabling certain cookies may affect the functionality and usability of tuna68. For more information on managing cookies in your browser, refer to your browser's help documentation.

The tuna68 platform also maintains standard server logs that record IP addresses, browser types, URL referrers, and timestamps for security and technical troubleshooting purposes. These logs are not shared with third parties unless required for security investigations.

9. Your Rights Regarding Personal Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and tuna68's policies, you have the following rights regarding your personal data:

To exercise any of the rights above, please contact the tuna68 Privacy team by email at support@tuna68.bio with the subject line "Privacy Rights Request – [Your Account Number]". We will process your request within 30 business days. For complex cases, we may require additional time and will notify you accordingly within that period.

Tuna68 may need to verify your identity before processing any privacy rights request to ensure we do not disclose your information to unauthorised parties.

10. Protection of Children's Data

Tuna68 is a platform intended exclusively for adults aged 18 and above. We do not knowingly collect, process, or store any personal data from individuals under the age of 18.

All new registrants are required to confirm that they are at least 18 years of age at the time of registration. tuna68 reserves the right to request proof of age in the form of a valid identification document if we have reason to believe any member is underage.

If you are a parent or guardian and believe your underage child has registered on tuna68, please contact us immediately at support@tuna68.bio. We will investigate and take appropriate action, including closing the account and deleting all associated data as promptly as possible.

11. Cross-Border Data Transfers

To provide you with tuna68 platform services, some of your personal data may need to be transferred to or stored on servers located outside Malaysia. This may occur when we engage international cloud service providers or global technology partners.

When cross-border data transfers occur, tuna68 ensures that:

• Your data is only transferred to countries or entities that provide a level of data protection comparable to Malaysia's;
• All data transfer agreements between tuna68 and overseas recipients include strict data protection clauses;
• We comply with all Malaysian legal requirements relating to the transfer of personal data overseas.

By using the tuna68 platform, you consent to this data transfer under the terms set out in this Privacy Policy. If you have any concerns about cross-border data transfers, please contact us for further clarification.

12. Links to Third-Party Sites and Services

The tuna68 platform may contain links to related third-party websites or services — such as e-wallet providers for deposits and withdrawals. tuna68 is not responsible for the privacy practices of these third parties.

When you click a link to a third-party site or use the services of a payment provider such as Touch 'n Go eWallet or GrabPay, you will be leaving the tuna68 platform and the relevant third party's privacy policy will apply. We encourage you to read the privacy policy of each third-party platform you use.

13. Changes to This Privacy Policy

Tuna68 reserves the right to amend or update this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or improvements to the services we offer.

When a material change occurs — meaning a change that significantly affects how we collect, use, or share your data — tuna68 will:

• Updating the "Last Updated" date at the top of this page;
• Displaying in-platform notifications on tuna68 when you log in;
• Sending a notification email to your registered address at least 14 days before material changes take effect.

Your continued use of the tuna68 platform after the effective date of any changes will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your account and request deletion of your data in accordance with the procedure set out in Section 9.

14. Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding how tuna68 handles your personal data, or if you wish to exercise any of the privacy rights outlined in Section 9, please contact us through the following channels:

• Privacy Email: support@tuna68.bio (use the subject line "Privacy Enquiry" or "Privacy Rights Request")
• Live Chat: Available 24 hours a day, 7 days a week via the tuna68 platform
• Language: Bahasa Malaysia and English
• Response Time: Within 30 business days for privacy rights requests; within 24 hours for general enquiries submitted via email

We take every privacy enquiry seriously. The tuna68 team responsible for privacy compliance will review your enquiry carefully and provide a thorough response within the timeframes stated.

If you are unsatisfied with how tuna68 has handled your privacy concerns after contacting us, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, appointed under the Personal Data Protection Act 2010.