Riding168 Privacy Policy – How We Protect the Personal Data of Malaysian Members

Riding168 collects your personal information through several channels as you use our platform. Below are the categories of information we collect and the purposes for which they are collected:

Riding168 only collects information that is strictly necessary for the stated purposes. We do not collect sensitive data such as medical records, religious beliefs, or political views unless you voluntarily provide it in the context of a specific request.

Information collected by riding168 is used solely for legitimate purposes directly related to delivering our services to you. Below is a detailed breakdown of how your data is used:

• Account management: Registration information is used to create, verify, and manage your riding168 account, including processing account closure or self-exclusion requests.
• Transaction processing: Financial data is used to process deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, and CIMB Clicks, as well as to facilitate your winnings withdrawals.
• Identity verification (KYC): Identity documents are used to satisfy anti-money laundering (AML) requirements and to verify that you are eligible to use the riding168 platform.
• Customer support: Communication records are used to help the riding168 support team resolve your issues or enquiries more efficiently.
• Platform security: Technical data such as IP addresses is used to detect and prevent fraud, unauthorised access, bot activity, and other suspicious behaviour.
• Responsible gambling: Gaming history and betting patterns are monitored to identify signs of problem gambling and provide appropriate assistance to members who need it.
• Legal compliance: Personal information is retained and disclosed to the relevant authorities when required by Malaysian law or a valid court order.
• Service improvement: Anonymised usage data is used to understand how members interact with the riding168 platform and to make relevant improvements.

Riding168 does not sell or share your personal data with third parties for marketing or commercial purposes. However, in limited and defined situations, information sharing may occur under the following circumstances:

• Payment service provider: Minimal transaction information is shared with authorised payment providers — such as FPX, DuitNow, and e-wallet providers — solely to process your transactions. These providers are bound by strict confidentiality agreements.
• Game software providers: Third-party game providers operating on the riding168 platform may receive session information necessary to run their games. No personally identifiable information is shared beyond what is technically required.
• Authorities and enforcement bodies: riding168 will disclose required information to Malaysian authorities when mandated by law, court order, or as part of an official investigation.
• Auditors and legal consultants: Appointed professionals responsible for ensuring legal compliance and industry standards may access certain data under binding confidentiality agreements.

Protecting your personal data is a responsibility that riding168 takes very seriously. We continually invest in security infrastructure to ensure your information remains protected at all times.

Technical security measures implemented by riding168:

• End-to-end encryption: All data transmitted between you and the riding168 platform is encrypted using TLS 1.3 protocol with 256-bit SSL encryption.
• Secure password storage: riding168 account passwords are never stored in plain text. We use strong cryptographic hashing with salting to protect your password even in the event of an unexpected data breach.
• Two-Factor Authentication (2FA): riding168 recommends and supports two-factor authentication for added account security. OTP codes via SMS are used for sensitive actions such as withdrawals.
• Continuous monitoring: riding168's security systems monitor all account activity in real time to detect suspicious patterns and respond immediately to identified threats.
• Internal access controls: Only riding168 staff who require access to specific data to perform their duties are authorised to do so. All access is logged and audited regularly.
• Regular security testing: riding168 conducts regular penetration testing and vulnerability assessments to identify and address potential weaknesses before they can be exploited.

While no security system is entirely foolproof, riding168 is committed to maintaining the highest security standards and responding swiftly and transparently in the event of an unexpected data breach.

The riding168 platform uses cookies and similar tracking technologies to enhance the user experience, analyse platform performance, and maintain the security of your session.

Types of cookies used by riding168:

• Essential cookies: Required for core platform functions such as maintaining your login session and ensuring security. These cookies cannot be disabled, as the platform will not function properly without them.
• Performance cookies: Collects anonymised information about how members use the riding168 platform – pages visited, time spent, and errors encountered. This data helps us improve the platform.
• Functional cookies: Stores your preferences — such as language, display settings, and other options — to provide a more personalised experience each time you visit riding168.
• Security session cookies: Used to verify your identity during an active session and prevent unauthorised access to your riding168 account.

You can manage your cookie settings through your browser at any time. However, disabling essential cookies may affect the functionality of the riding168 platform. The analytics cookies we use do not identify you personally, and all data is processed in aggregate.

In accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and sound data protection principles, you have the following rights regarding your personal data at riding168:

• Right to access: You have the right to request a copy of the personal data riding168 holds about you. We will provide this information in a readable format within 14 business days from the date of your request.
• Right to rectification: If you find that your personal information on riding168 is inaccurate or incomplete, you have the right to request an immediate correction. Certain details such as your name and phone number can be updated directly in your account settings.
• Right to erasure: You may request the deletion of your personal data from riding168's systems, subject to minimum legal retention requirements. riding168 will delete all data that is no longer required within a reasonable timeframe.
• Right to object: You have the right to object to the use of your data for specific purposes, including direct marketing. Such requests will be acted upon within 5 business days.
• Right to data portability: You may request your personal data in a reusable format (such as CSV) for transfer to another platform or for your own personal records.
• Right to withdraw consent: Where data processing is based on your consent, you have the right to withdraw that consent at any time without affecting the validity of any processing carried out prior to withdrawal.

To exercise any of the rights above, contact the riding168 privacy team at support@riding168.asia or via the in-platform live chat. Please clearly state which right you wish to exercise and provide sufficient identifying information so we can process your request securely.

Riding168 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or as required by applicable law.

• Active account data: For as long as your riding168 account remains active, your account information, game records, and transaction history will be retained to allow you to access your activity history and for customer support purposes.
• Data after account closure: In line with AML compliance requirements and financial regulations, riding168 retains transaction records and identity information for a minimum of 5 years following account closure.
• Support communication records: Live chat conversations and support emails are retained for 2 years for quality control purposes and as evidence in the event of a dispute.
• Cookie data: Session cookies expire automatically when you log out or close your browser. Preference cookies are stored for up to 12 months unless you delete them earlier.

Once the minimum retention period has elapsed, riding168 will securely delete or anonymise your data using procedures that ensure it cannot be recovered or re-identified.

Riding168 appoints an officer responsible for data protection matters to ensure all privacy enquiries and complaints are handled promptly and correctly.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by riding168, please reach out to us through any of the following channels: