F168 Privacy Policy — Personal Data Protection for Malaysian Members

1 Introduction

Welcome to the f168 Privacy Policy. This document is written for you — our valued members — so that you have a clear and complete understanding of how f168 manages your personal information. We believe transparency is the foundation of trust, and trust is the foundation of our relationship with every member across Malaysia.

This Privacy Policy applies to all services provided by f168 through the f168-play.net website and any related platforms operated by f168. It covers all personal information you provide to us during registration, while using the platform, when contacting customer support, and when conducting any financial transactions in MYR.

By registering an account with f168 or continuing to use this platform, you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact us to close your account.

2 Categories of Personal Data Collected

F168 collects various categories of personal data depending on how you interact with our platform. The table below outlines the types of data we collect and the reasons for doing so:

F168 does not collect sensitive data such as health information, religious beliefs, or political views unless you voluntarily share it in your communications with us, in circumstances we did not prompt.

3 How We Collect Your Personal Data

F168 collects members' personal data through three main channels:

A. Directly from You

• When you fill out the f168 account registration form with your name, phone number, and email address.
• When you submit the identity verification (KYC) documents required before large withdrawals are processed.
• When you contact the f168 support team via live chat, WhatsApp, or email.
• Whenever you complete any profile update form, withdrawal request, or account settings page.

B. Automatically During Platform Use

• Technical data such as IP address, device type, screen resolution, and browser type is collected automatically each time you access f168-play.net.
• Gaming session records — including games played, bet amounts, and outcomes — are automatically generated and stored by the f168 system for every active session.
• Cookie data and similar tracking technologies are used to personalise your experience and maintain your login session. See Section 9 for full details of our cookie policy.

C. From Trusted Third Parties

• Malaysian payment service providers such as Touch 'n Go, GrabPay, and DuitNow may share transaction verification information necessary to process your deposits and withdrawals.
• Licensed game providers such as Pragmatic Play, PG Soft, and Evolution Gaming may provide technical data relating to game sessions for the purposes of technical support and dispute resolution.
• Third-party identity verification services used in the KYC process may verify the accuracy of the documents you submit.

4 Purposes of Personal Data Use

F168 uses the personal data it collects only for legitimate, specific purposes. We do not use your data in ways you would not reasonably expect. Below are the primary purposes for which f168 uses personal data:

• Platform Service Provision: Creating and managing your account, processing deposits and withdrawals in MYR, enabling access to 700+ f168 games, and delivering a personalised gaming experience.
• Identity Verification and Fraud Prevention: Verifying member age (18 and above), and detecting and preventing fraudulent activity, money laundering, and unlawful use of the platform.
• Financial Transaction Processing: Processing deposits via Touch 'n Go, GrabPay, DuitNow, Boost, ShopeePay, and FPX, and managing winning withdrawals in Malaysian Ringgit (MYR) accurately and securely.
• Service Communications: Sends important notifications related to your account, transaction alerts, security notices, and responses to your support enquiries.
• Continuous Improvement: Analysing aggregated platform usage patterns to identify areas for improvement and to develop new features that add value for members.
• Consent-Based Marketing: Sending promotions, bonus offers, and platform news to members who have consented to receive marketing communications. You may unsubscribe at any time.
• Responsible Gaming: Monitoring gameplay patterns to identify signs of problem gambling and provide appropriate support to members who may need it.
• Legal Compliance: To fulfil legal obligations relating to financial compliance, suspicious transaction reporting, and record-keeping as required by the relevant authorities in Malaysia.

5 Data Sharing with Third Parties

F168 does not sell, rent, or disclose members' personal data to third parties for those parties' own marketing purposes. However, there are limited circumstances in which f168 needs to share certain data with selected parties to enable platform operations:

Operational Service Providers: f168 works with trusted third-party service providers to operate our platform — including cloud computing providers, transactional email service providers, and fraud detection system providers. All such providers are bound by strict confidentiality agreements and are only permitted to use data for the specific purposes defined by f168.

Licensed Game Providers: Game providers such as Pragmatic Play, PG Soft, and Evolution Gaming receive only the minimum technical data required to deliver your gaming experience — this is typically limited to anonymised session identifiers and does not include your name or financial details.

Malaysian Financial Service Providers: E-wallet and banking service providers such as Touch 'n Go, GrabPay, DuitNow, and FPX receive transaction information necessary to process deposits and withdrawals in MYR. Data processing by these providers is subject to their own privacy policies.

F168 ensures that all third parties receiving our members' personal data have adequate data protection measures in place and operate in accordance with accepted privacy standards. f168 does not transfer members' personal data outside Malaysia except with appropriate safeguards in place.

6 Data Security — How f168 Protects Your Information

The security of members' personal data is f168's highest priority. We continuously invest in the latest security technologies and procedures to keep your data safe from both internal and external threats.

The technical security measures implemented by f168 include:

• Data Encryption in Transit: All communications between your browser and f168's servers are secured using TLS 1.3 protocol with AES-256 encryption — the highest standard currently available.
• Stored Data Encryption: Sensitive personal data stored in f168's databases is encrypted using strong symmetric encryption. Member passwords are not stored in plain text — only an irreversible cryptographic hash is stored.
• Strict Access Controls: Access to member personal data within f168's internal systems is restricted to staff who require that access to carry out their duties, following the principle of least privilege.
• 24/7 Monitoring: f168's security systems continuously monitor all network and database activity to detect any unauthorised access attempts or suspicious activity in real time.
• Regular Security Testing: f168 conducts regular penetration testing and independent security audits to identify and address any vulnerabilities before they can be exploited.
• Environment Separation: Member production data is isolated from development and testing environments to ensure that real data is never exposed during platform development processes.

While f168 takes all reasonable steps to protect your data, no security system can be guaranteed 100% secure against every possible threat. In the event of a data security breach affecting members' personal data, f168 is committed to notifying the affected members and the relevant authorities within the timeframe required by applicable law.

7 Personal Data Retention Period

F168 retains member personal data only for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable law. The following are general data retention guidelines at f168:

• Active Account Data: Your personal data is retained and used to provide our services to you for as long as your f168 account remains active. You may request deletion of your data at any time (see Section 8).
• Data After Account Closure: Upon account closure, f168 retains basic personal data and transaction records for a minimum of 7 years to meet Malaysian legal requirements relating to financial compliance and anti-money laundering.
• Support Communication Records: Live chat session records and support emails are retained for 2 years from the date of the last communication for reference and service improvement purposes.
• Technical Data & Logs: Technical access logs and session data are retained for 90 days. Anonymised aggregate data may be kept longer for analytics purposes.
• Marketing Data: Where you have given consent for marketing communications, the relevant data is retained until you withdraw that consent.

Once the applicable retention period has ended, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual. f168 conducts periodic data reviews to ensure this process is carried out consistently.

8 Your Rights as a Data Subject

As an f168 member whose data we process, you have protected rights over your personal data. f168 respects and facilitates the exercise of these rights:

To exercise any of the rights above, contact the f168 privacy team by email at support@f168-play.net with the subject line "PRIVACY RIGHTS REQUEST" and include your account number to help expedite the process. f168 will respond within 5 working days and resolve requests within 30 calendar days, or notify you if a longer period is required.

9 Cookie and Tracking Technology Policy

F168 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored in your browser when you visit f168-play.net. The following are the categories of cookies we use:

You can manage and delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the f168 platform — you may be unable to log in or complete transactions correctly if essential cookies are blocked.

F168 does not use third-party cookies or tracking technologies for targeted marketing across other websites without your knowledge and consent.

10 Children's Data Protection

The f168 platform is exclusively for individuals aged 18 and above. f168 does not knowingly collect or process personal data from anyone under the age of 18.

F168 applies an age verification process at registration and during the KYC process to ensure that only adults may use our platform. This forms part of our commitment to responsible gaming and the protection of minors.

11 Links to Third-Party Websites

The f168 platform may contain links or references to third-party services — for example, links to Malaysian e-wallet providers such as Touch 'n Go or GrabPay for deposit and withdrawal purposes. f168's Privacy Policy does not apply to those third-party websites or services.

We encourage you to review the privacy policy of each third-party service you use, particularly those involved in your financial transactions. f168 is not responsible for the privacy practices or content of any third-party websites or services, even if accessed via a link from the f168 platform.

F168's licensed game providers — such as Pragmatic Play, PG Soft, and Evolution Gaming — operate under their own separate privacy policies, which are independent of this policy. Data processed in the context of gaming through these providers is governed by the data processing agreements f168 has in place with them to ensure adequate protection of f168 members' data.

12 Amendments to this Privacy Policy

F168 may update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, applicable laws, or the services we offer to members in Malaysia.

When we make material changes to this Privacy Policy — changes that significantly affect your rights or the way we use your data — we will:

• Displaying a prominent notice on the f168-play.net homepage for a reasonable period before any changes take effect.
• Sending notifications via email to the member's registered address to inform them of upcoming changes.
• Updating the "Last Updated" date at the top of this document to reflect the most recent revision date.

Continued use of the f168 platform after an amended Privacy Policy takes effect constitutes acceptance of the revised terms. If you do not agree with the changes, you have the right to close your account and request data deletion in accordance with the procedure set out in Section 8.

Previous versions of the Privacy Policy are available upon request by contacting support@f168-play.net — we maintain an archive of all prior versions for reference.

13 Contact Us About Privacy

If you have any questions, concerns, or requests relating to the privacy and protection of your personal data at f168, please do not hesitate to contact us:

• Privacy Email: support@f168-play.net (please include "PRIVACY ENQUIRY" in the subject line)
• Live Chat: Available 24 hours a day, 7 days a week via the chat icon on f168-play.net
• Response Time: Privacy enquiries are responded to within 5 working days; formal privacy rights requests are resolved within 30 calendar days.

Our team speaks Bahasa Melayu and is ready to help you understand how your data is managed or to process any request relating to your privacy rights. Your satisfaction and trust are our priority.