Personal Data Protection

Riding168 Privacy Policy – Our Commitment to Protecting Your Data

Riding168 takes the privacy of every Malaysian member who entrusts us with their personal information seriously. This Privacy Policy clearly explains what data we collect, how it is used, who can access it, and what rights you have over it. We believe that transparency in data handling is not merely a legal obligation — it is the foundation of trust between riding168 and each of our members.

Updated: 1 July 2026
Privacy Policy Summary
Data encrypted with 256-bit SSL
No data selling to third parties
You have the right to access and delete your data
Cookies are used for a better experience
Financial data is not stored directly
Contact us for any privacy enquiries

How riding168 Protects Your Privacy

Six key measures that keep your personal data safe with riding168

256-bit SSL Encryption

All communications between your device and riding168's servers are encrypted using TLS 1.3 with 256-bit encryption — the same standard used by Malaysian banking institutions such as Maybank and CIMB. Your data cannot be intercepted or read by unauthorized parties while in transit.

Secure Data Storage

Riding168 members' personal data is stored on servers protected by layered access controls — only authorized personnel can access your data, and every access is automatically logged. Your password is never stored in plain text; it is processed through a one-way cryptographic hash function that cannot be reversed.

No Data Sales

Riding168 does not sell, rent, lend or disclose members' personal data to any third party for marketing or commercial purposes. Your information will never be sold to advertisers, third-party analytics companies or any other organisation without your explicit consent.

Masked Financial Data

Riding168 does not directly store your full bank account number, credit card number, or complete e-wallet details. Transactions via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX are processed through third-party payment gateways that comply with PCI DSS standards. We retain only transaction references for audit purposes.

Your Data Controls

Every riding168 member has the right to access, correct, or request deletion of their personal data at any time. Requests can be submitted via account settings or by contacting the riding168 privacy team. We honour all valid requests within 30 business days.

Malaysian Legal Compliance

The riding168 Privacy Policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and all applicable regulations. We conduct periodic privacy compliance reviews and update our practices whenever legal requirements change.

1Introduction & Scope of Privacy Policy

This Privacy Policy is published by riding168, an online entertainment platform operating under the domain riding168.xyz, and applies to all individuals who use riding168 services — whether as registered members, site visitors or any other party interacting with our platform.

We understand that when you register an account with riding168, you are entrusting us with your personal information. We take that trust seriously. This policy is written in plain, accessible language — not complex legal jargon — so that every Malaysian member can clearly understand what happens to their data.

By using the riding168 platform, you agree to the data collection and usage practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to request deletion of your account and data.

This Privacy Policy should be read together with Terms & Conditions riding168, which forms the entire agreement between you and our platform.

2Personal Data Collected by riding168

Riding168 collects several categories of personal data from members and users of our platform. Below is a full breakdown of what is collected and under what circumstances:

Data Category Example Information Collection Methods
Identity Data Full name, MyKad number, date of birth, gender Registration form, KYC process
Contact Data Malaysian phone number, email address, mailing address Registration form, account settings
Technical Data IP address, device type, web browser, operating system, screen resolution Automatically upon visiting the platform
Transaction Data Total deposit amounts, payment methods (Touch 'n Go, GrabPay, FPX, etc.), transaction dates, reference IDs Every financial transaction
Gaming Data Betting history, games played, session duration, wins and losses Automatically during gameplay
Communication Data Live chat support content, emails to riding168, player feedback Interactions with the support team
Preference Data Language settings, game preferences, self-set limits Account settings and usage behavior

Riding168 does not collect data that is unnecessary for platform operations. We apply the principle of data minimisation — we only collect what is genuinely necessary to deliver the services you request and to keep the platform secure.

Financial Note: riding168 does not store your full bank account number, card number, or e-wallet PIN. All payment processing via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX is handled by third-party payment gateways that comply with PCI DSS security standards. We receive only transaction confirmation responses and reference IDs.

3Purpose of Data Collection & Use

Riding168 uses collected data for legitimate and specific purposes only. We do not use your data for any purpose not stated in this Privacy Policy without first obtaining your additional consent.

  • Account Management: Creating and managing your account, verifying your identity at login, processing account recovery requests and maintaining the security of your account.
  • Transaction Processing: Processing your deposits and withdrawals via Touch 'n Go eWallet, GrabPay, DuitNow, and other supported Malaysian payment methods, and maintaining transaction records for audit and dispute purposes.
  • Game Service Providers: Providing access to slots, Live Casino, blackjack, football betting, jackpots, and all other games on the riding168 platform. Game history is recorded to facilitate dispute reviews when necessary.
  • Fraud Prevention & Security: Identifying and preventing fraudulent activity, money laundering, multi-account abuse, and any security threats to the platform or other members.
  • Legal Compliance: Complying with Malaysian legal requirements, including the Personal Data Protection Act 2010, anti-money laundering (AML) obligations, and directives from the relevant authorities.
  • Service Communications: Sending you important account notifications, security updates, changes to terms or policies, and transaction information via SMS or email.
  • Promotions & Marketing (with consent): If you have agreed to receive marketing communications, we may send you information about relevant riding168 bonuses, promotions, and special offers. You can withdraw this consent at any time through your account settings.
  • Platform Improvements: Analysing usage patterns on an aggregated and anonymised basis to understand how members use riding168 and to make improvements that benefit all users.

Riding168 does not use your personal data to make fully automated decisions that materially affect you without human involvement, except in cases of real-time fraud detection that require immediate action to protect your account.

4Disclosure to Third Parties

Riding168 does not sell or trade members' personal data to any party. However, there are certain circumstances where we need to share information with carefully selected parties to enable the platform to operate safely and effectively:

  • Payment Service Providers: Payment gateways we use to process transactions via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX. They receive only the minimum information required to process your transaction and are bound by strict confidentiality agreements.
  • Game Providers: Companies such as Pragmatic Play, PG Soft and Evolution Gaming that supply slots, Live Casino and other games on riding168. They receive the minimum technical data required to process game rounds and generate results.
  • IT Service Providers: Hosting companies, CDN services, cybersecurity solutions, and other technical infrastructure providers that keep the riding168 platform running. All such providers are bound by data processing agreements that comply with data protection standards.
  • Legal Authorities: The Royal Malaysia Police (PDRM), Companies Commission of Malaysia (SSM), Bank Negara Malaysia, or any statutory body with legal authority to request information. riding168 will comply with lawful directives from authorities upon verifying the validity of such requests.
  • Professional Consultants: Lawyers, accountants, or auditors who provide professional advice to riding168 and are bound by professional confidentiality obligations.

In all of the above cases, riding168 ensures that only the minimum necessary data is shared. We do not permit any third party to use riding168 members' personal data for their own purposes without your consent.

5Data Security Measures

Riding168 implements a comprehensive set of technical and organisational security measures to protect members' personal data from unauthorised access, loss, destruction or inadvertent disclosure:

  • Encryption in Transit: All data transmitted between your device and riding168's servers is encrypted using TLS 1.3 and AES-256 encryption. This covers logins, financial transactions, game sessions, and all other communications.
  • Encryption at Rest: Sensitive data stored in the riding168 database is re-encrypted using separate encryption keys. Passwords are hashed using the bcrypt algorithm, which is irreversible.
  • Layered Access Control: Only riding168 staff who require access to specific data to carry out their authorized duties are permitted to access it. All access is logged and reviewed on a regular basis.
  • Two-Factor Authentication: riding168's internal systems require two-factor authentication for all staff accessing user data, adding an extra layer of security.
  • 24/7 Monitoring: riding168's security systems continuously monitor for suspicious activity and can take automated action to block unauthorised access attempts.
  • Penetration Testing: riding168 conducts regular independent security testing to identify and address vulnerabilities before they can be exploited.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a data breach affecting members' personal data, riding168 will notify affected members and the relevant authorities within the timeframe required by applicable law.

6Cookies & Tracking Technologies

Riding168 uses cookies and similar technologies to enhance the user experience, maintain platform security, and understand how the platform is used. Below is an explanation of the types of cookies we use:

  • Essential Cookies (Required): These cookies are required for the riding168 platform to function properly — including login session management, form security, and basic preference memory. Without them, the platform will not work. These cookies cannot be disabled.
  • Functional Cookies: Cookies that remember your preferences such as language selection, game settings, last bet size and other details that make your experience more comfortable. You can disable these cookies, but doing so may affect your gaming experience.
  • Analytics Cookies: riding168 uses aggregated and anonymized usage data to understand which pages are visited most frequently, how users navigate the platform, and where users encounter difficulties. This information helps us improve the platform for all members.
  • Security Cookies: Used to identify suspicious activity, prevent CSRF attacks, detect unauthorised login attempts and protect your account from threats.

You can manage your cookie preferences through your web browser settings. Most browsers let you view, delete, or block cookies. Please note that disabling certain cookies may affect the functionality of the riding168 platform.

Important Note: riding168 does not use third-party cookies for advertising purposes or to track your activity on other websites. All cookies we use are strictly for the operational and security purposes of the riding168 platform.

7Data Retention & Deletion

Riding168 retains members' personal data only for as long as necessary to fulfill the purpose for which it was collected, subject to minimum legal requirements that may mandate longer retention periods:

  • Active Account Data: Retained for as long as your account is active and for a reasonable period after closure to allow for account recovery if needed.
  • Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction, in line with Malaysian legal requirements governing financial records and anti-money laundering.
  • Game History: Retained for a minimum of 5 years for audit, dispute resolution, and legal compliance purposes.
  • Support Communication Records: Retained for 3 years from the date of last communication for reference and quality management purposes.
  • Technical Log Data: Access logs and security logs are retained for 12 months, after which they are deleted or anonymised.

Once the retention period has ended and there is no longer a legal or legitimate business reason to keep your data, riding168 will securely delete or anonymize it using methods that ensure it cannot be recovered.

If you voluntarily request account deletion, riding168 will delete your active data within 30 days, except for records that must be retained to comply with legal obligations. You will be informed of what is retained and for how long.

8Your Rights as a Data Subject

Under Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and the riding168 Privacy Policy, you have the following rights regarding your personal data:

Right of Access

You have the right to obtain a copy of the personal data we hold about you. Requests can be submitted by email to support@riding168.xyz. We will provide a data report within 30 days of receiving your request.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request a correction. You can update most profile information directly from your riding168 account settings. For corrections that require additional verification — such as your name or date of birth — please contact our support team.

Right to Erasure

You may request deletion of your personal data when it is no longer needed for the purpose for which it was collected, or when you withdraw your consent and there is no other legal basis for continued processing. Please note that certain data must be retained to fulfil legal obligations even after a deletion request.

Right to Object to Processing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. To object to processing for other purposes, you will need to provide valid grounds based on your specific circumstances. riding168 will consider your objection and communicate a decision within 30 days.

Data Portability Rights

You have the right to receive the personal data you have provided to riding168 in a structured, commonly used, and machine-readable format (such as JSON or CSV). This allows you to transfer your data to another service provider should you wish to do so.

Right to Restrict Processing

In certain circumstances — such as when we are investigating data accuracy or during a dispute — you may request that the processing of your data be temporarily restricted. During this period, riding168 may still retain your data but may not use it except for the limited purposes permitted by law.

To exercise any of the above rights, submit a written request to the riding168 privacy team via email at support@riding168.xyz. Please include your account number, the specific right you wish to exercise, and any relevant information that will help us process your request. riding168 will not charge a fee for reasonable data rights requests.

9Children's Privacy

The riding168 platform is not suitable for, and is not intended for, individuals under the age of 21. riding168 does not knowingly collect personal data from anyone below our minimum age requirement.

If riding168 discovers that personal data belonging to an individual under the age of 21 has been collected without our knowledge, we will take immediate steps to delete that data and close the account in question. Parents or guardians who believe their minor child may have registered an account on riding168 without permission are encouraged to contact us immediately at support@riding168.xyz.

10Privacy Policy Amendments

Riding168 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or changes to the services we offer. The latest version of the Privacy Policy will always be available on this page, with the update date clearly indicated.

When we make material changes to this Privacy Policy — for example, changes to how we use your data or new types of data being collected — we will notify members via email notification or in-platform notification before the changes take effect. Minor changes such as language clarifications or typographical corrections may not be accompanied by a specific notification.

Continued use of the riding168 platform after a revised Privacy Policy has been published will be considered acceptance of the updated terms. If you do not agree with the changes, please stop using the platform and contact us to close your account.

11Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way riding168 handles your personal data, please reach out to us through the following channels:

  • Privacy Email: support@riding168.xyz — please mark the email subject as "Privacy Enquiry" to ensure it is handled by the right team.
  • Live Chat: Via the live chat icon at the bottom right corner of the riding168 page — available 24 hours a day, 7 days a week.

Riding168 is committed to responding to all privacy-related enquiries within 5 business days. For more complex data rights requests, we will notify you if additional time is required, and will not exceed 30 days from the date the request is received.

If you feel that riding168 has not handled your privacy complaint satisfactorily, you have the right to lodge a complaint with the relevant Malaysian Personal Data Protection Department under the Personal Data Protection Act 2010.

Privacy Policy Related Documents

This Privacy Policy forms part of the riding168 information governance framework. Please also read Terms & Conditions and Responsible Gaming Policy us for a complete overview of the agreement between you and riding168.

Privacy & Responsible Gaming – Two Core Pillars of riding168

Data protection and responsible gaming are not two separate matters at riding168 — they are two sides of the same commitment to the wellbeing of every one of our members.

Your Data, Your Control

Every piece of information you share with riding168 belongs to you. We are simply the custodian. You may request access, correction or deletion at any time through your account settings or via our support email.

Protected Transactions

Every deposit and withdrawal made via Touch 'n Go eWallet, GrabPay, DuitNow, or FPX is processed through a fully encrypted connection. riding168 does not view or store your full payment account details.

Communication Controls

You can control the types of communications you receive from riding168 — including turning off promotional emails, bonus notifications and other marketing messages — directly from your account settings, without needing to contact support.

Privacy in Responsible Gaming

When you use the deposit limit or account break features on riding168, that information is kept strictly confidential. Our support team handles all Responsible Gaming requests with full discretion and empathy.

FAQ – riding168 Privacy Policy

The most frequently asked questions about how riding168 handles the personal data of Malaysian members

No. riding168 does not sell, rent or share members' personal data with any third-party company for advertising or marketing purposes. Your information is used solely for riding168 platform operations as stated in our Privacy Policy — account management, transaction processing, platform security and service communications. We do not use third-party advertisers that can access your personal data while you browse the riding168 platform. This commitment is unconditional and does not depend on any business or financial changes at riding168.

You may request a full personal data report by emailing support@riding168.xyz with the subject line "Data Access Request". Please include your account number and sufficient identifying details to allow us to verify your identity before releasing the report. riding168 will provide the report within 30 days of receiving a valid request. The report will cover identity data, transaction history, game history and account preferences that we hold. No fee is charged for the first request within any 12-month period.

When you close your riding168 account, we will delete or anonymize your active data within 30 days. However, certain records must be retained to meet legal obligations — in particular, financial transaction records, which must be kept for 7 years under Malaysian law. Gaming history is retained for 5 years for audit and compliance purposes. These retained records will not be used for any marketing or operational purpose — they are held in a protected archive with strictly limited access. You will receive written confirmation of what is retained and for how long once the account closure has been processed.

Yes, absolutely. All payment transactions on riding168 via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay and FPX are processed through third-party payment gateways that comply with PCI DSS (Payment Card Industry Data Security Standard). This means your payment account details — account number, PIN, OTP — are never passed through or stored by riding168. We only receive confirmation that a payment was successful, along with the transaction reference ID. The connection between you and the payment gateway is encrypted with TLS 1.3. If you receive an OTP or payment notification that you did not initiate, contact the riding168 support team immediately.

Yes, you can opt out of promotional emails and marketing communications from riding168 at any time. There are two ways to do this. First, you can update your communication preferences directly from your riding168 account settings — look for the "Notification Preferences" or "Privacy Settings" section. Second, every promotional email sent by riding168 contains an "Unsubscribe" link at the bottom — click that link and your preference will be updated within 48 hours. Please note that even after unsubscribing, you will still receive important account-related emails such as withdrawal confirmations, security notifications and terms updates — these are service communications that cannot be fully disabled.

Join riding168 with Confidence – Your Data is Safe with Us

Riding168 protects your privacy with 256-bit SSL encryption, no sale of data to third parties, and full control over your information. Create a free account today — minimum deposit of RM20 via Touch 'n Go eWallet, GrabPay, or DuitNow.

256-bit SSL Encryption No data selling Full data control in your hands Compliant with Malaysia's PDPA 2010
Bahasa Melayu