RioStarz Privacy Policy – Personal Data Protection for Malaysian Players

Introduction & Scope of Privacy Policy

Welcome to the RioStarz Privacy Policy page. This document is a formal agreement that details how RioStarz, operating under the domain riostarz.bet ("We", "Platform", or "RioStarz"), handles your personal data as a member or visitor of our website.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and international best practices in data protection. We are committed to ensuring that all information you provide is handled with the highest level of integrity, transparency, and accountability.

This Policy applies to all information collected through the RioStarz website, mobile app, live chat, email, registration process, deposits and withdrawals, and any other interaction you have with our platform. By registering an account or using RioStarz's services, you acknowledge that you have read and understood this Privacy Policy.

Types of Personal Data We Collect

RioStarz collects various categories of personal data depending on how you interact with our platform. Below is a full list of the data we may collect:

2.1 Data You Provide Directly

• Identity Information: Full name, national identity card number (MyKad), date of birth, gender and nationality.
• Contact Information: Email address, Malaysian mobile number and residential address.
• Financial Information: Payment method details including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX account numbers (Maybank2u, CIMB Clicks), and deposit and withdrawal transaction history in Malaysian Ringgit (RM).
• Account Information: Username, password (stored in encrypted form), betting history, and gaming activity.
• KYC Verification Documents: A copy of your MyKad or passport, along with proof of address documents where required for identity verification.

2.2 Automatically Collected Data

• Technical Data: IP address, browser type and version, device operating system, screen resolution, and device identifier.
• Usage Data: Pages visited, time spent, clicks, in-platform searches and your navigation patterns on RioStarz.
• Location Data: General location (state/city) based on your IP address, for compliance and security purposes.
• Cookie Data: Information collected through cookies and similar tracking technologies (see Section 6 for more details).

How RioStarz Uses Your Data

RioStarz uses your personal data only for legitimate, stated purposes as outlined below. We will not use your data for any other purpose without notifying you in advance:

• Account Management: Creating and managing your member account, including the login process, identity verification and profile information updates.
• Transaction Processing: Processing deposits and withdrawals in MYR via your preferred Malaysian payment method — whether Touch 'n Go, GrabPay, DuitNow, or FPX.
• Service Provision: Gives you access to all games on RioStarz — live casino, slots, football betting, badminton, cricket, and lottery.
• Security & Fraud: Detecting and preventing fraud, money laundering, unauthorised account use, and other suspicious activity on the RioStarz platform.
• Legal Compliance: Meeting our obligations under applicable Malaysian law, including KYC (Know Your Customer) and AML (Anti-Money Laundering) requirements.
• Service Communications: Sending account notifications, security alerts, system updates and important service-related information from RioStarz.
• Marketing (with consent): Sending you promotional information, bonuses, exclusive offers and the latest news from RioStarz — only if you have consented to receive them.
• Platform Improvements: Analysing usage patterns to improve the user experience, platform performance, and RioStarz's game library.
• Responsible Gaming: Monitors betting patterns to identify players who may need responsible gaming support.

Data Sharing & Disclosure

RioStarz respects your privacy and does not sell your personal data to any party. However, we may share your information with certain parties in the following circumstances:

• Payment Service Providers: Required transaction information is shared with Malaysian payment processors (such as FPX, Touch 'n Go, and GrabPay processors) solely to enable successful transaction processing.
• Game Providers: Minimum technical data required is shared with game providers (Evolution Gaming, Pragmatic Play, Microgaming) solely to ensure games function correctly.
• Law Enforcement: RioStarz will disclose information where required by court order, direction from Malaysian authorities or any applicable legal requirement.
• Technical Service Providers: IT infrastructure, hosting, analytics and security service providers, all bound by strict confidentiality agreements with RioStarz.
• Business Transfer: Should RioStarz be involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, with appropriate notice given to members.

Data Retention & Security Measures

RioStarz implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, unlawful use, damage or loss:

• 256-bit SSL Encryption: All data transmitted between your browser and RioStarz's servers is encrypted using the latest TLS/SSL protocols, ensuring secure communication at all times.
• Data-at-Rest Encryption: Sensitive data stored in our databases, including passwords and financial information, is encrypted using robust hashing algorithms.
• Multi-Layered Access Control: Only authorised RioStarz staff may access your personal data, and only to the extent necessary to carry out their duties.
• 24/7 Monitoring: Our security systems are monitored around the clock, 24 hours a day, to detect and respond to any security threats promptly.
• Regular Security Audits: Penetration testing and independent security audits are conducted periodically by third-party security experts to identify and address any vulnerabilities.

Data Retention Period

Your personal data will be retained for the duration your account remains active, plus any additional period required by law:

• Active account data: For as long as your account remains active on RioStarz
• Financial transaction records: 7 years from the date of transaction (AML legal requirement)
• Security logs: 2 years from the date the log was generated
• Upon account closure: Data is deleted or anonymised within 90 days, except where retention is required by law

Cookie Policy

RioStarz uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Essential Cookies (Required): Required for core RioStarz platform functions — login, session security and transaction processing. Cannot be disabled.
• Preference Cookies: Saving your personal settings such as language preference, betting denomination and preferred interface layout.
• Analytics Cookies: Helps us understand how members use the RioStarz platform for continuous improvement purposes.
• Marketing Cookies: Used to display relevant promotions and offers based on your interests — with your consent only.

Your Personal Data Rights

As a RioStarz member, you have rights protected under Malaysia's PDPA regarding your personal data. We respect and facilitate the exercise of these rights:

To exercise any of the rights above, please contact the RioStarz Privacy team via email at privacy@riostarz.bet or via 24/7 live chat. We will process your request within 30 business days.

Cross-Border Data Transfers

In the course of its operations, RioStarz may need to transfer your personal data to service providers operating outside Malaysia. Such transfers will only take place when:

• The recipient country maintains a level of data protection equivalent to or higher than Malaysia
• Appropriate data transfer agreements are in place, including recognised standard contractual clauses
• Data recipients are bound by the same security and confidentiality obligations as set out in this Privacy Policy
• The transfer is necessary to fulfil a contract between you and RioStarz (for example, processing international transactions)

RioStarz will always ensure adequate protections are in place before any transfer of personal data outside Malaysia is carried out.

Child & Minor Protection

The RioStarz platform is intended exclusively for individuals who are of age 18 years and above. We take our responsibility to protect children and teenagers from accessing gambling platforms seriously.

• RioStarz does not knowingly collect any personal data from individuals under the age of 18.
• If we become aware or are informed that a person under the age of 18 has provided us with personal data, we will promptly take steps to delete that information and close the account in question.
• If you discover that a minor under your care has registered an account on RioStarz, please contact us immediately at support@riostarz.bet for prompt action.

Third-Party Links

The RioStarz platform may contain links to or integrations with third-party services such as game providers, payment processors, and analytics tools. Please note that:

• The RioStarz Privacy Policy applies only to the platforms and services we directly operate.
• We are not responsible for the privacy practices or content of any third-party websites or services you may access through our platform.
• We recommend reading the Privacy Policy of each third-party service before providing them with any personal information.
• RioStarz selects service partners that uphold high privacy and security standards; however, we cannot guarantee the practices of third parties beyond our control.

Changes to This Privacy Policy

RioStarz reserves the right to update or amend this Privacy Policy from time to time to reflect changes in privacy practices, legal requirements, or new platform features. When material changes are made:

• We will update the "Last Updated" date at the top of this document.
• Notifications will be sent via email to your registered address and/or through an in-platform notice on RioStarz at least 14 days before the changes take effect.
• For minor changes that do not materially affect your rights, we may update this document without active notification.
• Continued use of the RioStarz platform after the effective date of any changes constitutes acceptance of the updated Privacy Policy.

We encourage you to review this page periodically to stay informed about how we protect your information.

Contact the RioStarz Privacy Officer

If you have any questions, concerns, or complaints regarding how RioStarz handles your personal data, you may reach our Privacy Officer through the following channels:

• Privacy Email: privacy@riostarz.bet — for all privacy-related enquiries and requests. Responses within 14 business days.
• Live Chat: Available 24/7 within the RioStarz platform — for general enquiries about privacy and data security.
• FAQ: Visit Frequently Asked Questions (FAQ) us for quick answers to the most frequently asked privacy questions.
• Official Complaints: If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in Malaysia.

RioStarz takes every privacy-related complaint seriously and is committed to resolving them fairly and transparently within a reasonable timeframe.