Personal Data Protection

Privacy Policy c168 – Our Commitment to Protecting Your Personal Information

C168 takes your privacy seriously. This document transparently explains how we collect, use, store, and protect your personal data — in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: 1 January 2026  |  Version 2.4
256-bit SSL encryption

All data transmitted between your device and c168 servers is protected with industry-grade SSL encryption at all times.

Malaysia PDPA Compliance

C168's personal data processing fully complies with the Personal Data Protection Act 2010 in force in Malaysia.

No Sale of Data to Third Parties

C168 does not sell, rent, or disclose your personal data to any third party for marketing purposes.

Strict Access Controls

Access to members' personal data is restricted to staff who require the information for operational purposes only.

Secure Data Storage

Data is stored on servers protected by multi-layer firewalls, 24/7 monitoring, and regularly encrypted backups.

Member Access Rights

You have the right to access, correct, or request deletion of your personal data at any time through the c168 support team.

Important Note: By using the c168 platform, you are deemed to have read and agreed to this Privacy Policy. Please review this document from time to time as we may update it to reflect changes in our privacy practices or legal requirements.
Section 1

Introduction

C168 ("we", "Platform") is committed to protecting the privacy and security of the personal information of all members who use our services. This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international industry best practices in data management.

This document describes the types of data we collect, why we need it, how we use it, and the security measures we take to protect it from any unauthorized access, use, or disclosure.

This Privacy Policy applies to all users who access or use the c168 website, mobile app, and all related services provided by our platform.

c168's Core Privacy Principles: We only collect data that is strictly necessary, retain it only for as long as needed, protect it to the highest security standards, and do not share it without a valid reason and your consent.
Section 2

Data Collected

C168 collects your personal data through several channels — including during the account registration process, during platform use, and through your interactions with our customer support team. Below is a summary of the types of data collected:

Data Categories Type of Information How Collected
Identity Data Full name, date of birth, identity card number, KYC document images Account registration & KYC verification
Contact Data Phone number, email address, residential address Registration form
Financial Data Bank account numbers, digital wallet details, transaction records Deposit & withdrawal process
Technical Data IP address, browser type, operating system, cookie data Automatically during use
Activity Data Game history, betting records, login data Automatically during use

We may also collect data from legitimate third-party sources such as identity verification agencies and payment service providers, strictly for verification and legal compliance purposes.

Section 3

Purpose of Data Collection

Every piece of data we collect has a clear and legitimate purpose. c168 uses your personal data for the following purposes:

  • Account management: Creating, verifying, and managing your member account including the KYC process
  • Transaction processing: Processing deposits, withdrawals, and all financial transactions securely
  • Service delivery: Providing access to all games and features on the c168 platform
  • Platform security: Detecting and preventing fraud, multi-account use, and any activity that violates our Terms and Conditions
  • Customer support: Handling inquiries, complaints, and providing technical assistance
  • Responsible gaming: Monitoring play patterns and sending responsible gaming notices when appropriate
  • Legal compliance: Fulfilling legal obligations including anti-money laundering (AML) compliance
  • Platform communications: Sending service notices, policy updates, and — with your consent — promotional information
Marketing Consent: We only send you marketing communications if you have given explicit consent. You may withdraw this consent at any time through your account settings or by contacting our support team.
Section 4

Cookie Usage

C168 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Cookies are small data files stored on your device when you browse our website.

Types of cookies we use:

  • Essential Cookies: Required for basic platform functions such as login session authentication and security. These cookies cannot be disabled.
  • Performance Cookies: Helping us understand how users interact with the platform for improvement purposes — data is collected anonymously and in aggregate.
  • Preference Cookies: Storing your preferences such as language, theme, and display settings so you don't have to reconfigure them each time.

You can manage or delete cookies through your browser settings. However, disabling certain cookies may affect platform functionality. Continued use of the c168 platform is considered consent to the use of necessary cookies.

Section 5

Third-Party Data Sharing

c168 does not sell your personal data. However, in certain limited and legitimate circumstances, we may share data with the following parties:

  • Payment service providers: To process deposits and withdrawals securely (e.g. DuitNow, FPX providers)
  • Game software providers: Minimum game session data required to deliver games from developers such as PG Soft or Pragmatic Play
  • Identity verification agency: To process KYC in order to ensure legal compliance
  • Law enforcement authorities: When required by applicable Malaysian law

All third parties we work with are bound by strict data confidentiality agreements and are only permitted to use your data for the specific purposes outlined in those agreements.

Phishing Warning: c168 will never request your password, OTP, or sensitive information via email or message. If you receive such a communication, ignore it and report it to our support team immediately.
Section 6

Data Security

The security of your personal data is an absolute priority for c168. We implement multiple layers of security to ensure your data is protected from cyber threats:

  • 256-bit SSL encryption for all communications between your device and c168 servers
  • Data encryption at rest — data stored on our servers is also encrypted, not just data in transit
  • Two-factor authentication (2FA) available for all accounts as an added layer of protection
  • 24/7 security monitoring by our cybersecurity team
  • Regular security audits by independent parties to identify and patch vulnerabilities
  • Role-based access control — staff can only access the data they need to perform their duties

While we take comprehensive security measures, no system is 100% immune to risk. In the event of a data breach that affects your rights, c168 will notify you and the relevant authorities within the timeframe required by law.

What You Can Do: Protect your account by using a strong and unique password, enabling two-factor authentication, and never sharing your login credentials with anyone. If you suspect any suspicious activity, contact c168 support immediately.
Section 7

Data Retention Period

C168 retains your personal data only for as long as necessary to fulfill the purposes stated in this Privacy Policy, or for as long as required by applicable law.

  • Active account data: Retained for the duration your account is active plus 7 years after account closure (financial compliance and anti-money laundering requirements)
  • Transaction records: Retained for 7 years from the transaction date in accordance with Malaysian financial legal requirements
  • Support communication logs: Retained for 2 years for service quality purposes
  • Technical data and server logs: Retained for 12 months for security and troubleshooting purposes

Once the retention period ends, data will be securely deleted using methods that ensure no recovery is possible.

Section 8

Your Rights as a Data Subject

Under Malaysia's PDPA and international privacy practices, you have the following rights regarding your personal data held by c168:

1
Right of Access

You have the right to request a copy of the personal data c168 holds about you.

2
Right to Rectification

You have the right to request correction of inaccurate or incomplete data.

3
Right to Erasure

You may request deletion of your data within the limits permitted by law.

4
Right to Object

You have the right to object to the processing of your data for marketing purposes at any time.

5
Right to Restrict Processing

You may request that we restrict how we process your data in certain situations.

6
Right to Data Portability

You have the right to receive your personal data in a portable format.

To exercise any of the above rights, please contact the c168 support team via the platform's live chat. We will process your request within 30 business days.

Section 9

Children's Privacy

C168 services are exclusively for individuals aged 21 and above. We do not intentionally collect, use, or store personal data from individuals under the age of 21.

If we discover that personal data of an individual under 21 has been collected without proper age verification, we will take immediate steps to delete that data and close the account in question.

Parental Responsibility: If you become aware that your minor child has registered or used the c168 platform, please contact our support team immediately so that appropriate action can be taken without delay.
Section 10

Privacy Policy Changes

C168 reserves the right to update or modify this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or added platform features. Any amendments will be indicated by the "Updated" date displayed at the top of this document.

For significant changes that may affect your privacy rights, c168 will:

  • Displaying clear notices on the platform's home page before changes take effect
  • Updating the version number and amendment date in this document
  • Sending notices to members via email or in-account notifications

We recommend reviewing this Privacy Policy periodically to stay informed about how we manage your data. Continued use of the c168 platform after any changes take effect constitutes your acceptance of the updated policy.

Section 11

Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how c168 handles your personal data, please contact our support team:

  • Live Chat: Available 24/7 directly through the c168 platform
  • Email: [email protected] (reply within 2 business days)

We are committed to addressing all privacy-related inquiries seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP).

Related Resources: To understand how we protect your gaming experience, please also read Terms and Conditions as well as Responsible Gaming Policy us.

Play Safe & Confident at c168

Your privacy and data security are our priority. Register an account today and enjoy an entertainment experience that is safe, fair, and fully protected.

See also: Terms & Conditions · Responsible Gaming · FAQ

Bahasa Melayu