Official Documents

Tuna68 Privacy Policy — Our Commitment to Protecting the Personal Data of Malaysian Members

Tuna68 takes seriously every piece of information you entrust to us. This Privacy Policy clearly explains what we collect, why we need it, and how we protect it — in plain language, not confusing legal jargon.

Last updated: 1 January 2026. This Policy complies with Malaysia's Personal Data Protection Act 2010 (PDPA).
"Your data belongs to you. We are simply its responsible custodian."
— TUNA68

Six Key Points on Privacy at tuna68

Before reading our full policy, here is a summary of tuna68's core commitments to your privacy and data protection.

256-bit SSL Encryption for All Data

Every piece of information that travels between your device and tuna68's servers — from login through to deposit transactions — is protected by industry-standard 256-bit SSL encryption, the same standard used by Malaysia's major financial institutions. No one in between can read your data.

Your Data Is Never Sold to Anyone

Tuna68 does not sell, rent, or trade member personal data with any third party for marketing or commercial purposes. This is not merely a policy — it is a core principle that cannot be compromised regardless of any financial offer from any party. Your data remains yours.

You Can Access, Correct or Delete Your Data

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the right to request a copy of the personal data tuna68 holds about you, correct inaccurate data, or request deletion of data in certain circumstances. The process for exercising these rights is straightforward and free of charge.

Internal Access Restricted to Relevant Employees Only

Not all tuna68 employees have access to member personal data. Access is granted on a need-to-know basis only — support staff assisting you with deposit issues have different access levels from those managing technical systems. Access logs are audited on a regular basis.

You Can Opt Out of Marketing Communications

Every promotional email sent by tuna68 includes a functional "unsubscribe" link that takes effect immediately. If you prefer not to receive promotions, you can disable this option in your account settings or contact our support team — no reason required.

Fully Compliant with Malaysia's PDPA

The tuna68 Privacy Policy is designed and updated to ensure full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). We regard legal compliance as the baseline minimum — our actual commitment to member privacy goes well beyond what the law requires.

1 Introduction & Scope of This Privacy Policy

This Privacy Policy is issued by tuna68 ("we", "our platform") and applies to all individuals who register an account, use our services, or visit the tuna68 website in Malaysia. By registering an account or using the tuna68 platform, you acknowledge that you have read and understood this Privacy Policy and agree to the way we process your personal data as described herein.

This Privacy Policy explains:

  • The types of personal data we collect from you.
  • Why we need that data and how it is used.
  • Who may receive your data in the context of tuna68's operations.
  • How long we retain your data and how it is protected.
  • Your rights regarding your personal data under Malaysian law.

This Privacy Policy should be read together with Terms & Conditions tuna68, which constitutes the entire agreement between you and our platform.

Note: This Privacy Policy applies to all tuna68 services including Sports Betting, e-sports, virtual sports, Live Casino, and all other platform features we offer to Malaysian members.

2 Personal Data We Collect

Tuna68 collects various types of personal data from you depending on how you interact with our platform. This data falls into several categories:

Data you provide directly:

  • Full name as shown on your MyKad or passport.
  • MyKad number or passport number for identity verification (KYC) purposes.
  • Date of birth, to verify that you are 18 years of age or older.
  • An active Malaysian mobile number.
  • A valid and active email address.
  • Current residential address in Malaysia.
  • Details of the payment methods you use — for example, the account number linked to your Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX.

Data collected automatically during use:

  • The IP address of your device and an estimated geographical location.
  • The type of device, operating system, and web browser you are using.
  • Login session records including the date, time, and duration of each session.
  • Betting activity records including selected sports, market types, stake amounts, and outcomes.
  • Deposit and withdrawal records including payment method, amount, and transaction date.
  • Cookie and related tracking technology data — explained further in Section 10.

Data from third-party sources:

  • Identity verification from a recognised KYC service provider.
  • Anti-money laundering (AML) blacklist screening using data from recognised providers.

3 Purpose of Data Collection & Use

Tuna68 uses the personal data collected for the following purposes, all of which are necessary to operate our platform lawfully, securely, and effectively:

Purpose of Use Data Used Requirements
Account registration & verification Name, email, phone number, MyKad Mandatory
Age verification (18-year age limit) Date of birth, identity document Mandatory — legal requirement
Deposit & withdrawal processing Payment method details, transaction records Required for financial transactions
Fraud prevention & AML IP, activity records, KYC data Mandatory — legal requirement
Customer support Name, email, related betting records Required to provide assistance
VIP program & rewards Betting activity records, VIP tier Required for the rewards programme
Marketing communications Email, phone number Consent-based — can be deactivated
Analytics & platform improvement Anonymous/aggregated usage data Tuna68's legitimate interests

Tuna68 will not use your personal data for any purpose other than those stated above without first obtaining your additional consent.

4 Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), tuna68 requires a valid legal basis for each type of personal data processing we carry out. The following are the legal bases we rely on:

  • Consent: For marketing communications, the use of non-essential cookies, and certain sensitive data processing — we require your explicit consent before proceeding. You may withdraw this consent at any time.
  • Contractual Requirements: Processing required to fulfil the agreement between you and tuna68 — such as processing bets, deposits, and withdrawal of winnings.
  • Legal Obligations: Processing required to comply with applicable Malaysian law, including KYC, AML, and fraud prevention requirements.
  • Legitimate Interests: Analysis of platform usage to improve our services, detect fraud, and ensure platform security — provided this interest does not override your fundamental rights and freedoms.

5 Disclosure of Data to Third Parties

Tuna68 does not sell member personal data to any third party. However, in the course of operating the platform, we may share data with certain parties within the following strict limits:

  • Payment processors: Payment service providers such as Touch 'n Go, GrabPay, Boost, ShopeePay, DuitNow, and FPX banks receive only the minimum transaction data required to process your deposits and withdrawals. They are subject to their own privacy policies and Malaysian legal obligations.
  • KYC service providers: The accredited identity verification companies we engage to verify member identities receive only the minimum identification data required to complete the verification process.
  • Technical service providers: Cloud infrastructure providers, security platforms, and other technical support services that assist us in running the platform. All such providers are bound by strict data protection agreements with tuna68.
  • Malaysian authorities: tuna68 will disclose personal data to the relevant Malaysian authorities when required to do so by law, court order, or for the purpose of investigating unlawful activity.

In all cases of disclosure to third parties, tuna68 shares only the minimum data necessary for the specific purpose in question, and ensures that third parties comply with appropriate data protection standards.

Important: Tuna68 does not share your data with marketing companies, data aggregators, or any party that does not have a direct role in operating the platform and services you use.

6 Cross-Border Data Transfers

In some situations, your personal data may be processed or stored outside Malaysia — for example, when we use international cloud infrastructure or technical services from global providers. When this occurs, tuna68 ensures that:

  • The recipient country or territory maintains a level of data protection equivalent to or exceeding the requirements of Malaysia's PDPA.
  • Appropriate data transfer agreements have been established between tuna68 and data recipients to ensure your data remains protected.
  • Encryption is applied during data transfers to prevent unauthorised access.

Tuna68 does not transfer personal data to jurisdictions that lack adequate data protection laws or that are recognised as high-risk from a data security standpoint.

7 Data Retention Period

Tuna68 retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable Malaysian law. The following are our data retention guidelines:

  • Active account data: For the duration your tuna68 account remains active and for a minimum of 5 years after account closure, to meet AML and financial record-keeping legal requirements.
  • Financial transaction records: Minimum 7 years from the transaction date, in accordance with Malaysian financial legal requirements.
  • KYC records and identity verification: Minimum 5 years from the date of verification or account closure, whichever is later.
  • Access logs and activity records: 2 years from the date of record for security and fraud prevention purposes.
  • Customer support communication data: 3 years from the date of communication, for record-keeping and reference purposes.
  • Non-essential cookie data: In line with the cookie lifetime settings you accepted — typically between 30 days and 12 months.

Once the retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

8 Technical & Organisational Security Measures

Tuna68 implements a range of technical security measures and organisational procedures to protect your personal data from unauthorised access, alteration, accidental disclosure, or destruction:

Technical security:

  • 256-bit SSL/TLS encryption for all data transmitted between your device and tuna68's servers.
  • Sensitive data stored in the database is encrypted using AES-256 standards.
  • Two-factor authentication (2FA) is available to all member accounts that want an additional layer of security.
  • An active intrusion detection system monitors for abnormal traffic 24 hours a day.
  • Regular security testing including penetration testing conducted by independent security experts.
  • Server infrastructure housed in certified data centres with strict physical access controls.

Organisational measures:

  • Access to member personal data is restricted to employees who require it to carry out their duties only.
  • All tuna68 employees undergo data protection training and sign binding confidentiality agreements.
  • A clearly defined data security incident response procedure — including notification procedures for affected members and for Malaysian authorities where required.
  • Regular internal security reviews and audits to identify and address vulnerabilities.

Security Incidents: If tuna68 becomes aware of a data breach that may affect your personal data, we will notify you within a reasonable timeframe and take the necessary remedial steps.

9 Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by tuna68:

  • Right to access: You may request a copy of the personal data tuna68 holds about you. We will provide a response within 21 days of receiving your request.
  • Right to rectification: If your personal data is inaccurate or incomplete, you may request that we correct it. You can update certain information directly through your tuna68 account settings.
  • Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.
  • Right to object: In certain situations, you may object to the processing of your personal data where it is based on tuna68's legitimate interests.
  • Right to request erasure: In circumstances defined under Malaysia's PDPA, you may request that we delete your personal data. Please note that this right is not absolute — there are situations where we are legally required to retain your data.

To exercise any of the above rights, contact the tuna68 support team by email at support@tuna68.run by clearly stating your request. We may need to verify your identity before processing the request in order to protect your privacy.

10 Cookies & Tracking Technologies

Tuna68 uses cookies and similar tracking technologies to enhance the user experience, enable essential platform functions, and understand how members use our platform. The following are the types of cookies we use:

  • Essential cookies: Required for the platform to function properly — including login session cookies, security cookies, and cookies that retain the contents of your betting cart. These cookies cannot be disabled without affecting the platform's core functionality.
  • Analytics cookies: Helps us understand how members use the platform — which pages are visited most often, where members encounter difficulties, and so on. This data is used in aggregated and anonymised form to improve the tuna68 platform.
  • Functional cookies: Remembering your preferences such as language, favourite sports, and display settings to deliver a more personalised experience in future sessions.

You can manage or decline non-essential cookies through your web browser settings. Please note that declining all cookies may affect the functionality of certain parts of the tuna68 platform.

11 Marketing Communications

Tuna68 may send you marketing communications — including promotions, bonus offers, the latest sports news, and platform updates — via email, SMS, or in-app notifications, provided you have given your consent to receive them during registration or through your account settings.

  • You can stop receiving marketing emails at any time by clicking the "unsubscribe" link at the bottom of any email we send.
  • You can manage all marketing communication preferences under the Settings section of your tuna68 account.
  • Opting out of marketing communications will not affect important transactional communications such as deposit confirmations, withdrawal notifications, or account security alerts — these will continue to be sent as they are essential to the operation of your account.

Please contact the tuna68 support team if you have trouble opting out of marketing communications, or if you continue to receive them after unsubscribing.

12 Policy Updates & How to Contact Us

Tuna68 reserves the right to update this Privacy Policy from time to time to reflect changes in Malaysian law, industry practices, or the way we operate the platform. When we make material changes, we will notify you via an in-platform notice or by email to the address registered in your account at least 14 days before the changes take effect.

  • The latest version of this Privacy Policy is always available on this page, with the last updated date clearly displayed.
  • Continued use of the tuna68 platform after the effective date of any amendment constitutes acceptance of the updated policy.
  • If you do not agree with any changes made, you have the right to close your account in accordance with the procedure set out in the tuna68 Terms & Conditions.

For any enquiries, requests, or complaints regarding this Privacy Policy, please contact us via:

  • Email: support@tuna68.run
  • Live chat: Available within the tuna68 platform 24 hours a day, 7 days a week

We are committed to responding to all privacy-related enquiries within 5 business days of receipt. For more complex requests such as data access or data deletion requests, a response may take up to 21 days.

How Tuna68 Protects Your Privacy Every Day

Member privacy at tuna68 is not just a written document — it is enforced through concrete systems, procedures, and everyday working practices.

End-to-End Encryption for All Transactions

From the moment you enter your password through to a deposit transaction via Touch 'n Go or DuitNow, all data travels through a 256-bit SSL encryption tunnel that ensures no third party can intercept or read your information — even if they are on the same WiFi network as you.

Strict Internal Access Controls with Regular Auditing

Within tuna68, access to member data is governed by a role-based access control system. Support staff who assist you with betting enquiries do not have access to your financial information. All access is logged and regularly audited to ensure no internal misuse occurs.

Regular Security Testing by Independent Experts

Tuna68 conducts regular penetration testing and security audits carried out by independent cybersecurity experts. This ensures any vulnerabilities in our systems are identified and addressed before they can be exploited — not after an incident has already occurred.

Active and Ongoing PDPA Malaysia Compliance

Tuna68 has internal procedures in place to ensure our Privacy Policy is kept up to date in line with the latest developments in Malaysia's Personal Data Protection Act 2010 (PDPA) and guidelines issued by the Personal Data Protection Commissioner of Malaysia from time to time.

Secure Data Deletion When No Longer Required

Once your data retention period has elapsed and there is no legal requirement to retain it further, tuna68 applies secure deletion procedures to ensure the data cannot be recovered by any party. We do not hold your data for longer than necessary.

Immediate Notification in the Event of a Security Incident

If tuna68 detects any security incident that may affect your personal data, we are committed to notifying you as promptly as practicable and taking all necessary steps to limit the impact and prevent similar incidents in the future.

Your Rights as a Tuna68 Member Under Malaysia's PDPA

Malaysian law grants you certain rights over your personal data. tuna68 fully respects and facilitates the exercise of these rights.

Right to Access Your Data

You may request a copy of all personal data tuna68 holds about you at any time. Contact us at support@tuna68.run and we will provide a data report within 21 days of receiving your request, at no charge.

Right to Correct Inaccurate Data

If you find that any personal data we hold about you is inaccurate or out of date, you have the right to request a correction. Basic information can be updated directly in your tuna68 account settings, while changes to important details such as your name require document verification.

Right to Withdraw Consent

Where processing is based on your consent — particularly for marketing communications — you may withdraw that consent at any time via your account settings or by contacting tuna68 support. Withdrawing consent does not affect the lawfulness of processing already carried out prior to that withdrawal.

Right to Request Data Erasure

In certain circumstances provided for under Malaysia's PDPA, you may request that tuna68 delete your personal data. Please note that this right has exceptions — for example, we are required to retain financial records for the period stipulated by Malaysian law.

Understanding tuna68's Privacy Policy — What It Means for You as a Malaysian Member

When you register an account on tuna68 and start betting on your favourite Malaysia Super League, EPL, or BWF badminton matches, you entrust us with a range of personal information — from your name and phone number to financial transaction records via your Touch 'n Go eWallet or DuitNow. tuna68 does not take that trust lightly. This Privacy Policy is our written commitment to honouring it.

Many Malaysians who use online platforms never read the platform's privacy policy — and that's understandable, since these documents are often written in dense legal language. At tuna68, we take a different approach. We want you to genuinely understand what happens with your data, in plain terms, so you can make informed decisions about using our platform.

Why tuna68 Needs Your Data

Every piece of information tuna68 collects from you serves a specific purpose directly tied to operating a safe and responsible sports betting platform. Your name and date of birth are required to verify your identity and age — this is not optional; it is a legal requirement under Malaysia's PDPA and AML regulations. Your mobile number is used for critical security communications such as login verification. Your payment method details — whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX — are required to accurately and securely process your deposits and winnings withdrawals.

Your betting activity records — the sports you select, market types, and stake amounts — are used to manage your account, calculate your VIP status and any cashback you are entitled to, and to detect any unusual activity that may indicate account misuse. This data is not used to "profile" you for sale to advertising companies or third-party marketers. Tuna68 is not in the business of selling member data.

The KYC Process at tuna68 — Nothing to Worry About

One concern commonly raised by new tuna68 members is the KYC (Know Your Customer) verification process, which may be required before a first withdrawal or a large withdrawal. We understand this concern — submitting a copy of your MyKad to any online platform requires a significant degree of trust. We want to assure you that tuna68 uses KYC data exclusively for identity verification purposes and AML compliance as required under Malaysian law — nothing more.

Your KYC data is stored in a separate system with higher encryption standards and more restricted access compared to standard operational data. Once your KYC process is complete and approved, you will not need to repeat it for future transactions unless there is a significant change to your information. tuna68 designed this as a one-time process — complete it once and you are done.

Data Security in the Context of Sports Betting

Sports Betting platforms handle sensitive financial information every day — deposits via Malaysian e-wallets, winning records, withdrawal records. tuna68 understands that members' trust in the platform's security is the foundation everything else is built on. A football fan betting on a JDT match in the Super League shouldn't have to worry about the safety of their phone number or TnG eWallet details — they should be able to focus entirely on analysing the game and making their betting decisions.

That is why tuna68 continuously invests in robust security infrastructure — not as a marketing talking point, but as a fundamental requirement for operating with integrity. 256-bit SSL encryption, regular security audits, strict internal access controls, and clearly defined incident response procedures are all part of tuna68's day-to-day operations, not just terms buried in a privacy document.

Contact Us for Privacy Enquiries

If you have any questions, concerns, or wish to exercise any of your rights under Malaysia's PDPA, the tuna68 support team is here to help. You can reach us via live chat within the tuna68 platform or by email at support@tuna68.run. We are committed to taking all privacy-related enquiries seriously and responding within the stipulated timeframe. Your trust is the most valuable thing we hold — and we will never do anything to compromise it.

Questions About Tuna68's Privacy Policy

If you wish to access your personal data, request corrections, withdraw marketing consent, or raise any concerns about how tuna68 handles your data, please contact us at support@tuna68.run or via live chat on the platform. For more information on how we use the platform, please refer to Terms & Conditions us. For self-management tools related to betting, visit the Responsible Gaming us.

Bet with Confidence at tuna68

Your data is protected, your payments are secure, and your privacy is respected. Create a tuna68 account today and focus on what matters most — enjoying the sports you love.

The tuna68 platform is intended for individuals aged 18 and above. Please bet responsibly.

Bahasa Melayu