I just got an email saying that my Apple ID was used to buy Tokens on Asphalt9

That is one of the latest scams. See the info below for steps to identify bogus emails.

• • Apple does not include document, or PDF files to download.
• Apple would not refer to you as Dear Customer, Dear Client, or anything other than the name on file for your account.
• Apple would not have such horrible spelling or grammar. 
• Apple would not send a message to “Undisclosed Recipients”. 

It is a phishing attempt. Do not respond. Do not divulge any personal or financial information. You can use the address below to forward the suspect email message, as an attachment to Apple.

reportphishing@apple.com

The links below have information to help identify fraudulent emails.

Identifying legitimate emails from the iTunes Store

https://support.apple.com/en-us/HT204759