Privacy Policy C168 — Our Commitment to Protecting Your Data

Welcome to the c168 Privacy Policy page. This document is the official agreement between c168 and you as a user of our platform, detailing how we handle your personal information with full responsibility and transparency.

C168 is committed to complying with Malaysia's Personal Data Protection Act 2010 (PDPA) and all applicable data protection legislation. We understand that your trust is invaluable, and we take every reasonable step to ensure your privacy is always protected.

This Privacy Policy applies to all information collected through the C168 website, mobile app, and any related services we offer to our members across Malaysia. By registering for or using the C168 platform, you agree that we may process your personal information in accordance with the terms set out here.

C168 collects various categories of personal information to enable us to provide a complete, secure, and effective service. Data is collected directly from you, automatically as you use the platform, or through trusted third parties.

Every piece of information we collect is used for clear and lawful purposes. c168 will not use your data for any purpose unrelated to the provision of our services or not stated in this policy.

• Account Management: Create and manage your c168 account, including registration processing, login verification, and password management.
• Transaction Processing: Process your deposits and fund withdrawals quickly and securely via supported payment methods such as FPX, DuitNow, Touch 'n Go eWallet, and GrabPay.
• KYC Verification: Verify your identity to meet legal requirements and ensure the security of all financial transactions in your account.
• Service Provision: Enables you to access all games, sports betting, Live Casino, and other services offered on the c168 platform.
• Platform Security: Detect and prevent fraud, money laundering, account abuse, and other security threats.
• Service Communications: Send you important notifications related to your account, transactions, system updates, and relevant security information.
• Marketing (with consent): Send you information about c168 promotions, bonuses, and exclusive offers, subject to the communication preferences you have set.
• Service Improvement: Analyse usage patterns to enhance the user experience, platform performance, and the range of games offered.
• Legal Compliance: Fulfil legal obligations under the PDPA 2010 and related regulations enforced in Malaysia.

C168 respects your privacy and does not share your personal information arbitrarily. Information sharing only occurs under specific, limited circumstances as set out below.

In all sharing situations described above, C168 ensures that data recipients are bound by data protection obligations equivalent to or stricter than our own standards.

The security of your personal data is our foremost responsibility. c168 continuously invests in robust security infrastructure to ensure your information is protected against all threats — both internal and external.

• 256-bit SSL Encryption: All communications between your browser or app and c168 servers are protected by the latest TLS/SSL protocols, ensuring your data cannot be intercepted by third parties.
• Integrated Database: Personal data is stored in databases protected by multiple layers of security, including role-based access controls and encryption of data at rest.
• Two-Factor Authentication (2FA): OTP verification via your registered phone number provides an additional layer of security during login and the withdrawal process.
• 24/7 Security Monitoring: The c168 security team monitors platform activity around the clock using advanced threat detection systems capable of identifying and responding to any threat in real time.
• Periodic Security Audits: The c168 platform undergoes regular independent security audits by external specialists to ensure all systems meet the latest industry security standards.
• Staff Training: All c168 staff with access to user data undergo regular data protection training and are bound by strict confidentiality agreements.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. C168 fully respects and facilitates the exercise of all these rights.

To exercise any of the above rights, please contact the c168 support team through our platform. We will process your request within 14 business days. Note: Some requests may be subject to identity verification requirements and applicable legal limitations.

C168 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small files stored on your device when you browse the C168 website.

You can manage your cookie settings through your browser at any time. However, disabling certain cookies may affect the functionality and your experience on the C168 platform. The C168 mobile app uses similar tracking technologies and is subject to the same policy.

C168 does not retain your personal data longer than necessary. Retention periods are determined based on the type of data, service requirements, and applicable legal obligations.

• Active Account Data: Retained for the duration your account is active on the C168 platform and for any subsequent period required by law.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with Malaysian legal requirements relating to financial records and anti-money laundering.
• KYC Documents: Retained for a minimum of 5 years after account closure or the end of the business relationship, in accordance with AML/CFT compliance requirements.
• Platform Activity Logs: Retained for 12 months for security and fraud detection purposes before being automatically deleted.
• Customer Support Communications: Retained for 24 months after a support ticket is closed for quality control and reference purposes.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first.

Once the retention period expires, your personal data will be securely deleted or anonymised in accordance with established procedures.

The c168 platform is exclusively for adults aged 18 and above. We do not knowingly collect or process personal information from individuals under the age of 18.

Should we discover that personal data of a minor has been collected without our knowledge, we will take immediate action to delete that information and close the relevant account. Parents or guardians who find that a child under their care has registered on the c168 platform are advised to contact our support team immediately.

C168 reserves the right to modify or update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technological developments.

Any significant changes to this policy will be communicated to you via in-app notifications, email, or a prominent notice on our Privacy Policy page. The update date displayed at the top of this page will always reflect the latest version in effect.

Your continued use of the c168 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree, you may request account closure and deletion of your data by contacting our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the c168 team is ready to assist you at any time.

We are committed to treating every complaint seriously and keeping you informed of the progress of any action taken within the stipulated timeframe.