Updated: January 2026

Privacy Policy RioStarz

At riostarz, your privacy is not just a responsibility — it is our core commitment. This document transparently explains how we collect, use, store, and protect your personal data as a user of our platform.

256-bit SSL
PDPA Compliant
Data Not Sold
256-bit
SSL Encryption
0
Data Sold to Third Parties
24/7
Security Monitoring
PDPA
Data Protection Act
Important Note

This Privacy Policy describes riostarz's data protection practices and applies to all users who access our platform via the riostarz.app website or the official riostarz mobile app. By using our platform, you fully agree to this policy.

1

Introduction and Our Privacy Commitment

RioStarz takes user privacy seriously. As an online betting platform serving hundreds of thousands of users across Malaysia, we understand how important your trust is when you share your personal information with us. That is why we built a robust and transparent data protection system from day one.

This Privacy Policy is prepared in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA), which sets clear guidelines on how the personal data of Malaysian citizens must be handled by organisations. We are fully committed to complying with every provision of this Act.

We have never and will never sell, rent, or transfer your personal data to any third party for marketing purposes without your explicit consent. Your trust is our most valuable asset, and we safeguard it with the utmost responsibility.

2

Personal Data We Collect

RioStarz only collects data that is strictly necessary to deliver a safe, seamless, and high-quality experience. We do not collect irrelevant or excessive information. The following are the categories of data we collect:

Data Category Example Information Purpose of Collection
Identity Information Full name, date of birth, IC/Passport number KYC verification, anti-fraud
Contact Information Phone number, email address Account communications, 2FA security
Financial Information Bank account number, eWallet ID Deposit & withdrawal processing
Technical Data IP address, device type, web browser Login security, fraud detection
Activity Data Game history, betting records Compliance, responsible gaming
Cookie Data Site preferences, login sessions Enhanced user experience

RioStarz never request your full password, bank PIN, or credit card CVV through any communication channel. Please be vigilant against anyone claiming to be a RioStarz representative and asking for such sensitive information.

3

How We Use Your Data

Every piece of data we collect has a clear and legitimate purpose. RioStarz uses your information for a range of key functions that keep your betting experience safe, fair, and enjoyable.

  • Verifying your identity during registration and the KYC process to prevent fraud and money laundering
  • Processing deposit and withdrawal transactions securely and accurately to your bank account or eWallet
  • Sending important account notifications, exclusive promotions, and security updates via email or SMS
  • Personalizing your gaming experience based on your preferences and activity history on the riostarz platform
  • Monitoring gameplay patterns for responsible gaming program purposes and detecting signs of addiction
  • Complying with legal and regulatory reporting requirements related to online gambling platform operations
  • Improving platform performance, identifying technical bugs, and developing better new features for users
  • Conducting anonymous aggregate statistical analysis to understand overall user trends

We do not use your data to make automated decisions that seriously impact your rights without any human intervention. If we need to use your data for purposes not stated here, we will obtain your consent first.

4

Data Sharing with Third Parties

RioStarz does not sell or disclose your personal data to third parties for commercial marketing purposes. However, there are limited situations where we need to share your data with certain parties to ensure our platform operates correctly and securely:

  • Payment Providers: Financial data that must be shared with banks, FPX operators, TNG eWallet, and GrabPay to securely process your transactions.
  • Game Providers: Basic account information required by licensed game providers to grant you access to their games on the riostarz platform.
  • KYC Services: Your identity documents are shared with licensed third-party identity verification providers to ensure the accuracy of the KYC process.
  • Legal Authorities: We are required by Malaysian law to disclose certain information to the authorities upon receiving a valid request related to a criminal investigation or court order.
  • Auditors & Compliance: Independent auditors and licensing bodies may access certain data within the scope of periodic compliance reviews.

All third parties working with RioStarz are required to comply with data security standards equal to or higher than those we apply ourselves. We are not responsible for the privacy practices of third parties that fall outside our direct control.

5

Data Encryption and Security Measures

Your data security is the absolute priority at riostarz. We continuously invest in cutting-edge security infrastructure to ensure your information is always protected against unauthorized access, data breaches, and any cyber threats.

All communications between your browser or app and RioStarz servers are encrypted using TLS 1.3 with AES-256 encryption — the same technology used by leading financial institutions and banks worldwide. This means every piece of data you send or receive is fully protected throughout its journey.

  • Encryption of data at rest using AES-256 for all sensitive information stored in our databases
  • Two-factor authentication (2FA) is available and strongly recommended for all RioStarz accounts
  • Real-time 24/7 security monitoring by our cybersecurity team to detect suspicious activity
  • Regular penetration testing by independent third-party security firms
  • Strict access controls ensuring only authorised staff can access user data
  • Detailed audit logs of all access to sensitive data for internal accountability purposes

While we take all reasonable steps to protect your data, no system is entirely risk-free. You can help by using a strong password, enabling 2FA, and never sharing your login credentials with anyone.

6

Cookies and Tracking Technologies

RioStarz uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website, allowing the platform to remember your preferences and settings.

  • Essential Cookies: Required for basic platform functions such as login sessions and security. These cookies cannot be disabled.
  • Performance Cookies: Collecting anonymous information about how you use our platform to help us improve our services.
  • Functional Cookies: Saving your preferences such as language selection, display format, and other personal settings.
  • Analytics Cookies: Helping us understand aggregate platform usage patterns for continuous improvement.

You can manage your cookie settings through your web browser settings at any time. However, disabling certain cookies may affect some features of the riostarz platform.

7

Your Rights as a Data Subject

Under the Malaysia Personal Data Protection Act 2010 (PDPA), you have certain rights regarding the personal data we hold about you. riostarz fully respects these rights and will process each of your requests within a reasonable timeframe.

Right of Access

Request a copy of the personal data we hold about you

Right to Rectification

Correct inaccurate or incomplete data in your account

Right to Erasure

Request data deletion subject to our legal obligations

Right to Object

Object to the processing of your data for specific purposes such as marketing

Right to Portability

Receive your data in a structured, machine-readable format

Right to Restriction

Request that we restrict how your data is processed in certain situations

To exercise any of the above rights, please contact our customer support team via live chat. We will process your request within 14 business days and may require identity verification before acting on it.

8

Data Retention Period

RioStarz retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Malaysian law. Once the retention period expires, data will be securely deleted or permanently anonymised.

Data Type Retention Period Reason
Active Account Information Throughout active account lifetime Ongoing service requirements
Financial Transaction Records 7 years after transaction AML/CFT legal compliance
KYC Documents 5 years after account closure Financial regulatory requirements
Security Logs 2 years Security incident investigation
Cookie Data 30 days to 1 year Depends on cookie type
Support Communication Records 3 years Quality assurance and reference
9

Amendments to the Privacy Policy

RioStarz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or business developments. Any material amendments will be communicated to you via your registered email or in-platform notification at least 14 days before taking effect.

The "Updated" date displayed at the top of this page reflects the last time this Privacy Policy was modified. Your continued use of the RioStarz platform after any amendments are published constitutes your acceptance of those changes. We encourage you to review this page periodically.

10

Contact Us Regarding Privacy

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist. We are committed to providing a comprehensive and timely response to every privacy inquiry received.

Live Chat
Available 24 hours / 7 days a week
Privacy Email
Why Your Data Secure at RioStarz?

Six layers of data protection ensuring your privacy is always safeguarded at every moment

Bank-Grade Encryption

Every piece of data travelling between your device and RioStarz servers is protected with TLS 1.3 and AES-256 — the same encryption technology used by major banks in Malaysia. Your data is never exposed in transit.

Malaysia PDPA Compliance

RioStarz operates in full compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). You have the right to access, correct, or delete your data at any time.

No Data Sales

Your personal data is never sold, rented, or transferred to any advertiser or data broker. We believe your data belongs to you, not as a commercial asset of ours.

24/7 Monitoring

Our cybersecurity team monitors riostarz systems around the clock without interruption. Any suspicious activity or unauthorized access attempts are detected and acted upon instantly and automatically.

Two-Factor Authentication

An additional security layer via 2FA ensures only you can access your riostarz account. Even if your password is compromised, your account stays protected with OTP verification.

Independent Security Audit

The RioStarz system undergoes regular penetration testing and security audits conducted by qualified independent third-party firms. Results are used to continuously strengthen your data protection.

Join RioStarz with Full Confidence

Your personal data is protected by cutting-edge encryption technology and a transparent privacy policy. Enjoy the best betting experience without privacy risks at riostarz.

SSL Protected PDPA Compliant Data Not Sold Independent Audit
Bahasa Melayu