Privacy Policy

Privacy Policy tuna 68 — Our Commitment to Protecting Your Personal Data

tuna 68 regards the personal data privacy of our members as a trust to be carefully upheld. This policy explains in detail how we collect, use, store, and protect your personal information in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last Updated: 1 January 2026 Language: Malay (ms-MY) PDPA 2010 Compliant
256-bit SSL
Data Encryption
No Sharing
Without Your Consent
Right of Access
Manage Your Data
PDPA 2010
Legal Compliance

Tuna 68's Six Data Protection Principles

These are not empty promises — here are six concrete things that tuna 68 carried out every day to ensure your personal data remains safe and protected at all times.

Advanced-Level Encryption

All data transmitted between your device and our servers tuna 68 is encrypted using 256-bit SSL technology — the same standard used by Malaysia's major banks. This means that even if someone were to intercept your communications, they would be unable to read the content without the appropriate encryption key.

No Sale of Data to Third Parties

tuna 68 has never and will never sell, rent, or trade our members' personal data to any third party for marketing or commercial purposes. Your data belongs to you — it holds no commercial value for us to sell to advertisers or any other party unrelated to our services.

Secure Data Storage

Member personal data tuna 68 stored on servers protected by multi-layered firewalls, intrusion detection systems, and strict access controls. Only specific, trained personnel have access to sensitive data, and all access is logged and monitored.

Minimum Data Collection

tuna 68 only collects data that is strictly necessary to provide our services to you. We do not request information beyond what is needed. This data minimisation principle ensures that the less data we hold, the lower the risk to your privacy in the event of any unforeseen security incident.

You're in Control

As a member tuna 68, you have the right to access, correct, or request the deletion of your personal data. You may also withdraw your marketing consent at any time. We believe you should have full control over your own information, and we make this process as straightforward as possible.

Malaysia PDPA Compliance

Privacy Policy tuna 68 developed in alignment with Malaysia's Personal Data Protection Act 2010 (PDPA). We conduct regular compliance reviews and invest in staff training to ensure all our data handling practices meet current legal standards.

1

Introduction & Scope of Privacy Policy

tuna 68 (operating under the domain tuna68.ws) is committed to protecting the privacy of every individual who interacts with our platform. This Privacy Policy transparently explains how we collect, process, store, and safeguard your personal data when you use our services tuna 68.

This policy applies to all registered members, website visitors, and anyone who interacts with the platform, mobile application, or customer support services tuna 68. By registering for or using our services, you grant consent to tuna 68 to process your personal data in accordance with the terms described in this document.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and internationally recognised data protection principles. If you do not agree with how we handle your personal data as described here, please discontinue your use of the platform. tuna 68 and contact us to request the deletion of your account.

PDPA Note: As a data controller under Malaysia's Personal Data Protection Act 2010, tuna 68 has a legal obligation to ensure your personal data is processed lawfully, fairly, and transparently. You have the right to file a complaint with the Personal Data Protection Commissioner of Malaysia if you believe your privacy rights have been violated.
2

Personal Data We Collect

tuna 68 collects two main categories of data: information you provide to us directly, and data collected automatically when you use our platform.

Data you provide directly:

  • Full name as per MyKad or Malaysian passport
  • An active Malaysian phone number
  • A valid email address
  • Date of birth (for age verification — minimum age of 18)
  • Bank account or eWallet details (Touch 'n Go, GrabPay, DuitNow, FPX, Boost, ShopeePay) for deposit and withdrawal purposes
  • A copy of your identity document (MyKad) if requested for identity verification
  • Information you share when communicating with our customer support

Data collected automatically:

Data Type Example Purpose of Collection
Technical Data IP address, browser type, operating system, screen resolution Security, fraud detection, and platform optimisation
Usage Data Pages visited, session duration, games played User experience improvement, game recommendations
Transaction Data Deposit, withdrawal, wagering, and winnings history Legal compliance, winnings verification, customer support
Location Data General location based on IP address (state/city within Malaysia) Eligibility verification, fraud detection
Device Data Unique device ID, phone model Login verification, account security
3

How We Use Your Personal Data

tuna 68 uses your personal data only for lawful and legitimate purposes. The following sets out our primary purposes for using your data, along with the legal basis supporting each use:

  • Service Delivery — Processing registrations, deposits, and withdrawals, and enabling you to access all games and platform features tuna 68. (Basis: Contract performance)
  • Identity Verification — Verifying your eligibility, confirming the minimum age requirement of 18 years, and meeting Know Your Customer (KYC) obligations. (Basis: Legal obligation)
  • Fraud Prevention — Monitoring account activity to detect and prevent fraud, money laundering, and platform abuse. (Basis: Legitimate interests)
  • Customer Support — Processing enquiries, resolving issues, and providing the assistance you need. (Basis: Contract performance)
  • Service Communications — Sending transaction notifications, important account updates, and service information. (Basis: Legitimate interest / Contractual obligation)
  • Marketing (with consent) — Sending promotional information, bonus offers, and the latest updates tuna 68 — only if you have given consent to receive marketing communications. (Basis: Consent)
  • Platform Improvement — Analyses aggregate usage patterns (without identifying individuals) to improve platform design and features. (Basis: Legitimate interests)
  • Responsible Gaming — Monitoring gambling patterns to identify members who may need support and to fulfil responsible gaming obligations. (Basis: Legal obligation / Public interest)
Marketing Note: You may withdraw your marketing consent at any time by clicking the "Unsubscribe" link in any of our marketing emails, or by contacting our customer support. Withdrawing your marketing consent will not affect your receipt of essential service communications such as transaction notifications.
4

Disclosure of Data to Third Parties

tuna 68 does not sell or trade your personal data to third parties for their own commercial purposes. However, in the course of running our business operations, we may need to share your data with certain parties in the following situations:

  • Payment Service Providers — eWallet operators and banks (including those handling Touch 'n Go, GrabPay, DuitNow, FPX, Boost, and ShopeePay) require the minimum transaction data necessary to process your deposits and withdrawals.
  • Game Providers — Companies such as Pragmatic Play, PG Soft, and Habanero may receive unique identifiers (not your name or any directly personal information) that are necessary to run games within the platform. tuna 68.
  • Technology Providers — Companies that provide the cloud computing, cybersecurity, analytics, and technical support services required for our platform to operate.
  • Legal Authorities — Law enforcement agencies, courts, or regulatory bodies (including Bank Negara Malaysia) when required by law or court order.
  • Fraud Prevention and AML — Third-party identity verification agencies and fraud detection systems to help us fulfil our anti-money laundering (AML) obligations.

In all of the above cases, tuna 68 ensures that the relevant third parties are bound by appropriate confidentiality agreements and only use shared data for specific, permitted purposes. We do not allow our service providers to use your data for any purpose other than providing the services we have contracted them for.

Cross-Border Data Transfers: Some of our technical service providers may store or process data outside Malaysia. In such cases, tuna 68 ensures that any such data transfers are governed by data transfer agreements that comply with Malaysian PDPA standards and are safeguarded by equivalent protection mechanisms.
5

Data Security Measures

tuna 68 continuously invests in technical and organisational security measures to protect your personal data from unauthorised access, accidental disclosure, alteration, or destruction. Key measures we have in place include:

  • 256-bit SSL/TLS Encryption — All communications between your device and our servers are encrypted using the latest industry standards.
  • Multi-Layered Firewall — Our server infrastructure is protected by advanced firewalls to prevent unauthorised external access.
  • Role-Based Access Control — Our staff only have access to data that is relevant to their job responsibilities. Access to sensitive member data is restricted to trained and authorised personnel only.
  • Audit Log — All access to member personal data is logged and monitored to detect any suspicious activity.
  • Two-Factor Authentication (2FA) — Available for member accounts and mandatory for all internal staff systems tuna 68.
  • Regular Penetration Testing — We conduct regular security testing by independent cybersecurity experts to identify and address vulnerabilities before they can be exploited.
  • Secure Data Backup — Member data is regularly backed up to a secure, encrypted location to ensure service availability in the event of a system failure.
In the Event of a Data Breach: Should tuna 68 detect any data security breach that may affect your rights and freedoms, we are committed to notifying you within 72 hours of becoming aware of the breach, in line with industry best practices. Notification will be sent via your registered email address or through an in-platform notification.
6

Cookies & Tracking Technologies

Platform tuna 68 uses cookies and similar tracking technologies to enhance your user experience and enable us to deliver better services. The types of cookies we use are as follows:

  • Session Cookies — Temporary cookies that are deleted when you close your browser. They are used to maintain your login session while you are using the platform. tuna 68 and ensure you do not need to log in repeatedly within a single session.
  • Persistent Cookies — Cookies stored on your device for a defined period of time. They help us remember your preferences (such as interface language) and deliver a more personalised experience when you return to the platform.
  • Security Cookies — Used to verify your identity, prevent cross-site request forgery (CSRF), and protect the platform against security attacks.
  • Analytics Cookies — Helps us understand how members use our platform in aggregate (without identifying individuals) so we can make meaningful improvements to the user experience.

You can manage and delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of the platform. tuna 68 and prevent you from logging in or processing transactions properly.

7

Your Rights Under PDPA 2010

As an individual whose data is processed by tuna 68, you have the following rights under Malaysia's Personal Data Protection Act 2010. We respect these rights and will process every valid request within a reasonable timeframe.

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this in a readable format within 14 business days of receiving your request.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You can update certain details directly through your account settings.

Right to Erasure

Under certain circumstances, you have the right to request that we delete your personal data. Please note that some data may need to be retained to comply with legal obligations, such as financial records.

Right to Object to Processing

You may object to the processing of your data for direct marketing purposes at any time. For other types of processing, the right to object depends on the legal basis underpinning that processing.

Right to Restriction of Processing

In certain circumstances (for example, while you are disputing the accuracy of your data), you have the right to request that we restrict the processing of your data while the matter is being resolved.

Right to Lodge a Complaint with the Commissioner

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia, without prejudice to any other legal remedies available to you.

To exercise any of the above rights, please contact us by email at support@tuna68.ws or via 24/7 Live Chat. We may need to verify your identity before processing certain requests to ensure we do not disclose data to the wrong party.

8

Data Retention Period

tuna 68 only retains your personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Our general retention schedule is as follows:

Data Type Retention Period Basis
Active account information For the duration of the active account + 7 years after closure Legal obligation (financial records)
Financial transaction records 7 years from the date of transaction AMLA 2001 & financial reporting requirements
Support communication logs 3 years from the date of communication Dispute resolution
Aggregated analytics data No limit (data is anonymised) Contains no personal information
Security log 2 years Fraud detection & security
Marketing data (if consent is withdrawn) Deleted within 30 days Respecting your choices

Once the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be associated with you. The deletion process follows security procedures that ensure the data cannot be recovered.

9

Children's Privacy

Platform tuna 68 is intended exclusively for individuals aged 18 and above. We do not knowingly collect personal data from children or anyone under the age of 18.

If we discover that we have collected personal data from a person under the age of 18, we will immediately take the following steps:

  • Suspending or closing the account in question immediately.
  • Deleting all personal data associated with that account.
  • Returning any funds that may remain in the relevant account through the appropriate channels.
Notice to Parents and Guardians: If you suspect that a child or dependent under the age of 18 has accessed or registered an account on tuna 68, please contact us immediately via 24/7 Live Chat or email support@tuna68.ws. We will investigate and take appropriate action without delay.
10

Changes to This Privacy Policy

tuna 68 may update this Privacy Policy from time to time to reflect changes in our privacy practices, the services we offer, or applicable legal requirements.

If we make significant changes to the way we handle your personal data, we will:

  • Displaying a clear notice on the platform's main page tuna 68 at least 7 days before the changes take effect.
  • Sending notifications to members via their registered email address or in-platform notifications.
  • Updating the "Last Updated" date at the top of this document.

Continued use of the platform tuna 68 after the effective date of those changes will be considered your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your data as described in Section 7.

Periodic Review: We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your data. A link to the Privacy Policy is always available in the footer of the tuna 68 platform.
11

Contact Us About Data Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how tuna 68 we handle your personal data, please do not hesitate to reach us through the following channels:

  • Privacy Email: support@tuna68.ws (please state "Data Privacy Enquiry" in the email subject line)
  • Live Chat: Available 24 hours a day, 7 days a week through the platform tuna 68
  • Service language: Bahasa Malaysia and English
  • Target response time: Written enquiries responded to within 24 hours on business days

For urgent matters relating to account security or if you suspect your data has been compromised, please use Live Chat for the fastest response. Our trained team will guide you through the immediate steps you need to take.

If you are not satisfied with the response you receive from us regarding a privacy request, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commissioner. Further information on how to file a complaint is available on the official website of the Department of Personal Data Protection Malaysia.

Data Privacy at tuna 68 — What Really Happens with Your Information

When you sign up for any online platform today — whether it's entertainment, banking, or shopping — you share your personal data. That is simply the reality of the modern digital world. What sets one platform apart from another is not whether they collect data, but how they use it, how they protect it, and whether they are transparent about all of it.

tuna 68 chooses to be transparent. This Privacy Policy is not a document buried somewhere hard to find — it is prominently displayed and written in language that an ordinary Malaysian player can understand, not just a lawyer. This is not only because the PDPA 2010 requires it, but because we believe you have the right to know what happens with your personal information.

The Data We Collect and Why

When you register with tuna 68, we collect your full name, phone number, email address, date of birth, and payment account details. Each piece of information serves a specific purpose. Your full name is required to verify your identity when you make a withdrawal — we need to ensure the funds reach the right person. Your phone number is used for login verification and important security notifications. Your date of birth is required to confirm that you are at least 18 years old, as mandated by law. Your payment details are needed to process deposits via Touch 'n Go, GrabPay, DuitNow, FPX, Boost, or ShopeePay, and to ensure withdrawals are made to the correct account in your name.

We do not ask for more than that for basic processes. You are not required to provide your home address, MyKad number (except during identity verification for large withdrawals), or any other information that is not relevant to providing our services to you.

Local Payment Methods & Transaction Privacy

One aspect of privacy that many players overlook is the privacy of their financial transactions. At tuna 68, all transactions are conducted in MYR through payment methods familiar to Malaysian players — Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, and ShopeePay. This is not only convenient, but also means your transactions are processed through Malaysia's financial infrastructure, which is already subject to local legal protections.

tuna 68 does not store your full credit card details or bank account numbers on our servers. Sensitive payment information is processed directly by the relevant payment provider via a secure connection, and we only receive transaction confirmation — not your raw financial data. This minimises the risk to your financial data in the event of any unforeseen security incident.

Serious Cybersecurity

Not all online entertainment platforms invest adequately in cybersecurity. tuna 68 takes a different approach — we invest continuously in security infrastructure because we understand that losing member trust through a data breach is damage that is difficult to undo. 256-bit SSL encryption, two-factor authentication, role-based access controls, continuous audit logs, and regular penetration testing are not mere checkboxes on a compliance list — they are real investments that protect your data every single day.

Your Rights — Use Them

PDPA 2010 gives you real rights over your personal data — the right to access, correct, delete, and object to certain processing. We do not make this process difficult or complicated. Whether you want to know what data we hold about you, correct inaccurate information, or stop receiving our marketing emails — all of this can be done easily through our customer support. Reach us via 24/7 Live Chat or email us at support@tuna68.ws, and our team will be happy to assist you.

Finally, there is one thing we want to make absolutely clear — tuna 68 has never sold, and will never sell, our members' personal data to anyone. Your data belongs to you. We hold it to provide the services you use, and we protect it as we would our own most valuable asset. Your trust is the foundation of our business, and we will not compromise it for any short-term commercial gain.

If after reading this Privacy Policy you still have questions or concerns, please reach out to us. We are here to listen and respond with transparency. Thank you for trusting tuna 68 — that trust is something we uphold with the utmost care, every single day.

Ready to Play Safely at tuna 68?

A platform that takes your privacy seriously, pays out winnings fast, and offers over 1,200 games — that is tuna 68. Register for free today and experience the difference.

256-bit SSL Protected Data No sale of data to third parties PDPA 2010 Compliance 24/7 Privacy Support
Bahasa Melayu