C168 Privacy Policy — Malaysia Member Personal Data Protection

At c168, your privacy is more than a legal obligation — it is a responsibility we take seriously. This document clearly explains how we collect, use, store, and protect your personal information every time you use our platform.

Updated: June 2026
PDPA Compliance
SSL 256-bit
Our Privacy Commitment
  • Your data is not sold to third parties
  • 256-bit SSL encryption for all data
  • Data access restricted to authorised personnel only
  • Right to request data deletion at any time
  • Full compliance with the Personal Data Protection Act
c168's Six Data Protection Principles

The principles that shape how we manage your personal information

Purpose-Based Collection

We only collect data that is genuinely necessary for the clearly stated purposes. There is no excessive collection of data irrelevant to the services you use on the c168 platform.

End-to-End Encryption

All your personal data and financial transactions are protected by continuous 256-bit SSL encryption. This means every piece of information transmitted between your device and the c168 servers cannot be intercepted by unauthorised parties.

Not Sold to Third Parties

C168 has never and will never sell, rent, or trade members' personal information to any third party for commercial purposes. Your data remains entirely yours.

Control in Your Hands

You have the full right to access, amend, download, or request deletion of your personal data at any time via your account settings or by contacting our support team.

Limited Retention Period

Your data is not stored indefinitely. c168 sets clear retention periods for each data category in accordance with legal and operational requirements — after which the data is securely deleted.

Immediate Incident Response

In the event of any data security breach that may affect you, c168 is committed to notifying affected members within 72 hours and taking immediate remedial action.

01Introduction & Scope of This Policy

This Privacy Policy is issued by c168 and applies to all users who access or use our platform, including the c168.lc website, Android and iOS mobile apps, and any digital services we offer.

We understand that your trust in c168 depends in large part on how we handle your personal information. This policy is written in clear, plain language — not filled with confusing legal jargon — so you truly understand your rights and how we respect them.

C168 complies with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards. Every data processing activity we carry out has a valid legal basis and a clear purpose.

Note: By using the c168 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of our platform.

02Types of Personal Data We Collect

C168 collects your personal information through several means: information you provide directly during registration, information collected automatically during your use of the platform, and information we receive from legitimate third parties.

Data Category Example Information Collection Method
Identity Full name, date of birth, MyKad number, profile photo Account Registration & KYC
Contact Email address, mobile phone number Account registration
Financial Bank account number, bank name, transaction records Deposit & withdrawal process
Technical IP address, device type, operating system, web browser Automatically during use
Behaviour Wagering history, favourite games, session duration Automatically during use
Communication Support chat records, emails, complaints Interactions with customer support

We do not collect sensitive information such as biometric data, health records, or religious beliefs unless required by law.

03How We Use Your Data

Every piece of information we collect is used for a specific and legitimate purpose. c168 does not use your data for any purpose not stated in this policy without first obtaining your consent.

  • Account management: To create, verify, and securely manage your account, including the KYC process required for legal compliance.
  • Transaction processing: To accurately and securely process deposits, withdrawals, and all financial transactions in your account.
  • Legal compliance: To fulfil legal obligations including anti-money laundering (AML), age verification, and reporting required by the authorities.
  • Platform security: To detect and prevent fraud, account misuse, unauthorised access, and suspicious activity.
  • Service improvement: To analyse usage patterns and enhance the user experience on the c168 platform.
  • Service communications: To send important notifications related to your account, transactions, promotions you have subscribed to, and policy updates.
  • Responsible gaming: To monitor wagering patterns and provide early support to members who may need assistance.

04Data Sharing with Third Parties

C168 does not sell or trade your personal data. However, there are limited situations where we need to share your information with certain parties for legitimate operational purposes:

  • Payment providers: Required transaction details are shared with payment service providers such as FPX, DuitNow, Touch 'n Go, and banks to process your transactions.
  • Technology providers: Providers of technical infrastructure and cloud services that support the operation of the c168 platform, subject to strict confidentiality agreements.
  • Authorities: Information required by government agencies, regulatory bodies, or courts when mandated by applicable law.
  • Identity verification service: For KYC verification and fraud prevention purposes by licensed service providers.

Important: All third parties with whom we share data are bound by strict data protection agreements and are only permitted to use your information for the specified purposes.

05Security & Data Protection

C168 continuously invests in the latest security technologies and procedures to protect your personal data from unauthorised access, loss, misuse, or disclosure.

  • 256-bit SSL encryption: All data transmitted between your device and the c168 servers is protected by the highest-grade SSL encryption — the same standard used by major banking institutions.
  • Strict access controls: Only c168 staff with a specific operational need are permitted to access member personal data, and all access is logged and audited regularly.
  • Two-factor authentication (2FA): 2FA is available for all accounts to provide an additional layer of protection during login.
  • 24/7 Monitoring: The c168 security team monitors platform activity around the clock to promptly detect and respond to any threats.
  • Periodic penetration testing: Our technical infrastructure is regularly tested by independent security experts to identify and patch any vulnerabilities.

While no system can be guaranteed 100% secure, c168 takes all reasonable measures and meets industry standards to keep your data safe at all times.

06Cookies & Tracking Technologies

The c168 platform uses cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device when you visit our platform.

  • Essential cookies: Required for core platform functions such as login, user sessions, and security. These cookies cannot be disabled.
  • Performance cookies: Helps us understand how users interact with the platform so we can continually improve the overall user experience.
  • Functional cookies: Stores your preferences such as language, display settings, and login information for a more convenient experience in future visits.
  • Analytics cookies: Used to collect anonymous statistical data on platform usage for service improvement purposes.

You can manage your cookie settings through your web browser. However, disabling certain cookies may affect the functionality of some parts of the c168 platform.

07Your Rights as a Data Owner

Under the Personal Data Protection Act 2010 and c168's internal policies, you have the following rights regarding your personal data:

Right to Access

You have the right to know what personal data we hold about you and to obtain a copy of it.

Right to Rectification

You may request the correction of any inaccurate or incomplete information in our records.

Right to Erasure

You may request the deletion of your data, subject to legal obligations that require us to retain it.

Right to Object

You may object to the processing of your data for marketing or analytics purposes at any time.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another platform.

Right to Restrict Processing

In certain circumstances, you may request that we temporarily limit how we process your data.

To exercise any of the above rights, contact the c168 support team via Live Chat or email. We will process your request within 14 working days.

08Children's Data Protection

The c168 platform is strictly for individuals aged 18 and above. We do not knowingly collect, store, or process any personal information from minors.

If we discover that we have inadvertently collected data from a person under the age of 18, we will immediately take steps to delete that data and close the account in question.

If you become aware that a minor has registered on the c168 platform, please notify us immediately at [email protected] so that prompt action can be taken.

09Cross-Border Data Transfers

As an online platform, some of your data may be stored or processed on servers located outside Malaysia. Any such data transfers are carried out in compliance with applicable legal requirements and with adequate protective measures in place.

  • All cross-border data transfers are subject to data processing agreements that comply with international standards.
  • We ensure that recipient countries maintain a level of data protection equivalent to or higher than Malaysia's.
  • The cloud service providers we use comply with ISO 27001 and SOC 2 security standards.

10Changes to This Privacy Policy

C168 reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our operational practices, legal requirements, or technological developments.

  • Any significant changes will be communicated to members via email or in-platform notification at least 14 days before taking effect.
  • The updated effective date will be clearly stated at the top of this document.
  • Continued use of the c168 platform after changes take effect will be considered acceptance of the updated policy.

We recommend that you review this Privacy Policy page periodically to stay informed about how we protect your information.

11Contact Us About Privacy

If you have any questions, concerns, or complaints regarding how c168 handles your personal data, our team is ready to assist you at any time.

We are committed to addressing every privacy-related enquiry seriously and within a reasonable timeframe. Your trust is our most valuable asset, and we will never take any concern you raise lightly.

Live Chat
Available 24/7
Response Time
Within 14 working days

Your Data Is Safe with c168

We understand that entrusting your personal information to any platform requires a high level of confidence. At c168, protecting your privacy is not merely a procedure — it is a core value we uphold. Register today and enjoy a safe, transparent, and responsible gaming experience.

  • 256-bit SSL encryption for all data
  • Data not sold to third parties
  • Full compliance with Malaysia's PDPA Act
  • 24/7 customer support in Bahasa Malaysia
Bahasa Melayu