RioStar Official Documents

RioStar Privacy Policy – Data Protection for Malaysian Players

RioStar treats your privacy as a priority. This document clearly explains how we collect, store, use, and protect your personal information when you use our platform.

Last updated: 1 January 2026 Bahasa Malaysia (ms-MY)
SSL 256
Encryption Bits
0
Sale of Data to Third Parties
24/7
Security Monitoring
PDPA
Data Compliance

RioStar's Data Protection Commitment

Six core principles that underpin how RioStar manages your privacy and personal data

End-to-End Encryption
All data transmitted between your device and RioStar's servers is encrypted using 256-bit SSL protocol — the same security standard used by Malaysia's leading banking institutions, including Maybank and CIMB. Your information is protected at all times.
Minimum Data Collection
RioStar only collects information that is genuinely necessary to provide our services and meet legal requirements. We do not collect irrelevant or excessive data. This "data minimisation" principle is central to how we operate.
No Sale of Data
RioStar has never and will never sell, rent, or trade member personal data to any third party for marketing or commercial purposes. Your data is not our product — your trust is the most valuable asset we protect.
Right to Full Control
You have full rights to access, correct, download or request the deletion of your personal data held by RioStar. Simply contact our support team and your request will be processed within 14 business days.
Financial Transaction Privacy
All deposit and withdrawal records via Touch 'n Go eWallet, GrabPay, DuitNow, and FPX are strictly confidential. Your financial transaction details are never shared unless required by law or a valid court order.
Limited Data Retention
RioStar retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Data that is no longer needed will be securely deleted in accordance with our strict data disposal procedures.
RioStar's Privacy Commitment

This Privacy Policy explains how RioStar ("we", "the Platform") collects, uses, discloses and protects your personal information as a member of our platform. This document forms part of your agreement with RioStar and should be read together with Terms & Conditions us. By using the RioStar platform, you agree to this policy.

1 Introduction

RioStar takes the privacy of our members very seriously. We understand that when you share your personal information with us — whether during account registration, identity verification, financial transactions, or simply while browsing the platform — you are placing your trust in us. That trust is not something we take lightly.

This Privacy Policy has been established to fulfil RioStar's responsibilities under international data protection best practices and to give you full clarity on how your information is managed. We believe transparency is the foundation of a healthy relationship between a platform and its users.

This policy applies to all members and users of the RioStar platform, including those accessing it via the website at riostar.best, the Android and iOS mobile apps, and any other device used to access RioStar services.


2 Information We Collect

RioStar collects information from you in several ways. Below are the categories of information we collect and the reasons for doing so:

Information You Provide Directly

  • Registration Information: Full name, Malaysian mobile number, email address, date of birth, and password when you open a RioStar account.
  • KYC Verification Documents: A copy of your MyKad, passport, or driving licence to verify your identity and age during the KYC (Know Your Customer) process.
  • Financial Information: Details of the payment methods you use — including your Touch 'n Go e-wallet account number, GrabPay, Boost, ShopeePay, DuitNow account or FPX details — to process deposits and withdrawals.
  • Support Communications: Records of your interactions with the RioStar customer support team via live chat, WhatsApp or email.

Automatically Collected Information

  • Platform Usage Data: Games you play (slots, Live Casino, roulette, lottery, Sports Betting for Liga Super or EPL), session duration, betting records, and transaction history.
  • Technical Data: IP address, device type, operating system, web browser type, screen resolution and time zone.
  • Cookie Data: Information stored through cookies and similar tracking technologies to enhance the user experience and for analytics purposes.
  • General Location Data: Approximate geographic location based on IP address for compliance and security purposes (not precise GPS location).
Data Type Primary Purpose Legal Basis
Name & Contact Information Account management, communications Contractual agreement
Identity Documents KYC verification, fraud prevention Legal obligations
Payment Information Deposit & withdrawal processing Contractual agreement
Betting Records Bet settlement, customer support Contractual agreement
Technical & IP Data Security & fraud prevention Legitimate interests
Cookie Data User experience improvement Consent

3 How We Use Your Data

RioStar uses the information collected only for legitimate and necessary purposes. We do not use your data in ways you would not expect or that could be detrimental to you. The following are the primary purposes for which data is used:

  • Account Management: Creating and maintaining your RioStar account, processing logins, and managing account security.
  • Transaction Processing: Processing deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX, as well as managing your withdrawal of winnings.
  • Identity Verification: Conducting the KYC process to verify that you meet the minimum age requirement of 18 years and to prevent the use of false identities.
  • Fraud Prevention: Detecting and preventing fraud, money laundering, bonus abuse, and any security threats to the platform and other members.
  • Customer Support: Responding to inquiries, resolving complaints, and providing technical support related to your account.
  • Legal Compliance: Meeting reporting obligations to the relevant authorities as required by Malaysian law or a valid court order.
  • Platform Improvements: Analysing usage patterns in aggregate and anonymised form to improve the features, interface, and performance of the RioStar platform.
  • Service Communications: Sending you important notifications about your account, changes to our terms, security updates and promotions you have agreed to receive.

RioStar does not use any automated decision-making systems that materially affect your rights without human review. If an important decision regarding your account needs to be made — such as a security-related account suspension — our team will review the case individually.


4 Sharing Information with Third Parties

RioStar does not sell, rent, or share your personal information with third parties for marketing purposes. We only share your data in strictly limited and necessary circumstances, as outlined below:

  • Payment Service Providers: Information required to process your financial transactions is shared with approved payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, DuitNow, and FPX operators. These providers are bound by strict confidentiality agreements and may only use your data to process the relevant transactions.
  • Game Software Providers: Minimal technical data is shared with licensed casino and sports software providers to ensure games function correctly and fairly. These providers do not receive any personally identifiable information that could be used to identify you as an individual.
  • Legal Authorities: RioStar will disclose information to Malaysian authorities when required by law, court order or a valid request from an enforcement agency. In all such cases, we will disclose only the minimum information necessary.
  • Analytics Services: Anonymised and aggregated usage data — with no personally identifiable information — may be shared with analytics services to help us understand general platform usage patterns.

RioStar's Guarantee: In all data-sharing arrangements with third parties, RioStar ensures that the relevant parties are bound by data protection agreements that are at least as stringent as the standards we set for ourselves. We do not permit third parties to use your data for their own purposes outside the agreed scope of cooperation.


5 Data Security Measures

RioStar continuously invests in security infrastructure to keep your data protected at all times. The technical and organisational measures we have in place are among the strongest in the industry:

  • 256-Bit SSL Encryption: All communication between your device and RioStar's servers is encrypted using TLS 1.3 with 256-bit encryption. This means that even if someone were to intercept your internet traffic, the data captured would be completely unreadable.
  • Stored Data Encryption: Sensitive information stored in RioStar's databases — including passwords and financial details — is encrypted using strong encryption algorithms. Passwords are never stored in plain text.
  • 24/7 Security Monitoring: RioStar's automated threat detection system monitors for suspicious activity around the clock and immediately alerts our security team the moment any anomaly is detected.
  • Strict Access Controls: Only RioStar staff with a legitimate business need are permitted to access members' personal data, and all access is logged and regularly audited.
  • Two-Factor Authentication: RioStar offers two-factor authentication (2FA) for player accounts as an added layer of security. We encourage all members to enable this feature.
  • Regular Penetration Testing: The RioStar platform undergoes regular independent security testing to identify and address any vulnerabilities before they can be exploited.

While RioStar takes all reasonable steps to protect your data, no security system is entirely foolproof. In the event of a material data breach affecting your information, we will notify you within a reasonable timeframe and take immediate remediation measures.


6 Cookies & Tracking Technologies

RioStar uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you browse the RioStar platform.

We use the following types of cookies:

  • Essential Cookies: Required for core platform functionality — including maintaining your login session and ensuring account security. These cookies cannot be disabled without affecting how the platform works.
  • Preference Cookies: Saving your personal settings such as language, time zone and display preferences so you don't have to reconfigure them on every visit.
  • Analytics Cookies: Helps us understand how members use the platform — the most frequently visited pages, navigation flows, and points where users encounter difficulties. This information helps us improve the RioStar platform.
  • Security Cookies: Used by our fraud detection system to identify suspicious activity patterns and protect member accounts from unauthorised access.

You can manage cookie usage through your web browser settings. However, disabling certain cookies may affect the functionality of the RioStar platform. We recommend keeping essential and security cookies enabled for the best gaming experience.


7 Your Rights Regarding Personal Data

As a RioStar member, you have the following rights regarding the personal data we hold about you. We are committed to making it easy for you to exercise these rights without unnecessary hassle:

Access Rights
Request a copy of the data we hold about you
Right to Rectification
Correct inaccurate or outdated data
Right to Erasure
Request deletion of data that is no longer needed
Right to Restriction
Restrict the processing of your data under certain circumstances
Right to Data Portability
Receive your data in a machine-readable format
Right to Object
Object to the processing of your data for specific purposes

To exercise any of the rights above, please contact the RioStar support team by email at support@riostar.best stating the right you wish to exercise and the relevant details. RioStar will process your request within 14 business days. In complex cases, this period may be extended to 30 days, with prior notice to you.

Please note that these rights are subject to certain exceptions — for instance, we are unable to delete data that is still required to fulfil a legal obligation or to defend or pursue legitimate legal claims.


8 Children's Data Protection

The RioStar platform is intended strictly for individuals aged 18 and above. We do not knowingly collect or process personal data from anyone under the age of 18. If you believe RioStar has inadvertently collected information from someone under 18, please contact us immediately at support@riostar.best and we will take steps to delete that information promptly.

RioStar conducts age verification during registration and through the KYC process to ensure all members meet the minimum age requirement. If we determine during the KYC process that a member is under 18 years of age, the account will be closed immediately and all funds will be returned to the original payment method.


9 Cross-Border Data Transfers

In operating the RioStar platform, your data may be stored or processed on servers located outside Malaysia. This occurs when we use cloud computing services or international software providers that support the platform's operations.

In all cases of cross-border data transfers, RioStar ensures that:

  • Data is only transferred to countries or organisations that maintain adequate data protection standards.
  • All transfers are protected by data processing agreements that include contractually binding data protection clauses.
  • All providers receiving data are subject to the same confidentiality and security obligations as RioStar's internal policies.

If you would like to learn more about the specific mechanisms used to protect your data during cross-border transfers, please contact us via support@riostar.best.


10 Data Retention Period

RioStar retains your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law. The following are our data retention guidelines:

  • Active Account Data: For as long as your account remains active on RioStar. This data is necessary to manage your account and deliver our services to you.
  • Financial Transaction Data: A minimum of seven (7) years from the date of the transaction, in compliance with Malaysian tax regulations and financial legal requirements.
  • KYC Documents: At least five (5) years after account closure or the date of the last transaction, whichever is later, for anti-money laundering compliance purposes.
  • Support Communication Records: Three (3) years for dispute resolution and service quality improvement purposes.
  • Technical Data & Logs: Twelve (12) months for security and incident investigation purposes.
  • Data After Account Closure: Accounts closed at a player's request will go through a data removal process within 90 days, except for data that must be retained to meet legal obligations.

When data is no longer needed, RioStar deletes it securely using data disposal procedures that prevent recovery of the deleted information.


11 Changes to This Privacy Policy

RioStar may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new platform features. When we make material changes, we will:

  • Updating the "Last Updated" date at the top of this document.
  • Displaying a clear notice on the RioStar platform regarding the changes.
  • Sending notifications to all members with active accounts via email or in-app notifications.

We encourage you to review this Privacy Policy periodically to stay informed about how RioStar protects your information. Your continued use of the RioStar platform after any changes to this Privacy Policy take effect will be considered your acceptance of the updated policy.

If you disagree with any changes made, you have the right to close your account by contacting the RioStar support team. We will process your account closure and return any valid remaining balance to your original payment method.


12 Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or how RioStar handles your personal data, we encourage you to reach out to us directly. We're here to help and committed to providing clear, helpful responses.

You can reach us via:

  • Email: support@riostar.best — We aim to respond to all privacy-related enquiries within 3 business days.
  • Live Chat: Via the live chat button in the bottom-right corner of the RioStar platform — available 24 hours a day, 7 days a week in Bahasa Malaysia and English.

When contacting us regarding a privacy request, please include your full name and the email address registered to your RioStar account so we can verify your identity and process your request efficiently.


RioStar's Privacy Commitment to You

We know you have choices when it comes to online entertainment platforms. By choosing RioStar, you're placing your trust in us — and we don't take that lightly. Your privacy is not just a legal obligation for us; it's a core value we uphold every day. We will continue to improve our privacy practices and remain transparent about how we manage your data.

Why Data Privacy Matters to RioStar Malaysia Players

When you play at RioStar — whether you're betting on a Malaysia Super League match, spinning the jackpot slots, or sitting at a live baccarat table — you're sharing sensitive information with us. Your name, phone number, Touch 'n Go or GrabPay account details, betting records — all of this is personal data that deserves proper protection. That's why privacy isn't just a page you scroll past and click "Agree" on — it's the foundation of trust between you and the platform you choose.

RioStar understands that Malaysian players, like the increasingly tech-savvy digital users of today, are growing more conscious of their data security. Widely reported data breach incidents across various digital platforms have made users more cautious — and rightly so. We welcome this awareness, as it drives us to continuously strengthen our data protection practices and be more transparent about how we operate.

On the technical side, RioStar uses 256-bit SSL encryption for all communications — the same standard used by major Malaysian banks such as Maybank and CIMB. This means every time you make a deposit via DuitNow or FPX, or withdraw winnings to your GrabPay or Boost eWallet, the information is encrypted before transmission and can only be read by authorised systems at both ends. Anyone attempting to intercept that data would see nothing but meaningless strings of characters.

The KYC process at RioStar — where we ask you to submit a copy of your MyKad or passport — is something that occasionally raises questions from new players. We understand the concern. For RioStar, KYC is more than a formality; it is a two-way protective measure. It safeguards us against platform misuse and, more importantly, it protects you from the possibility of someone else opening an account in your name without your knowledge. The KYC documents you submit are stored in an isolated, encrypted system with strict access controls — only staff with a specific business need may access them, and every access is logged and audited.

One aspect of RioStar's Privacy Policy that we are particularly proud of is our commitment to players' right to control their own data. Unlike some platforms that make data deletion unnecessarily difficult, RioStar makes it straightforward to request access to, correction of, or deletion of your data. Simply contact our support team and your request will be processed within the stipulated timeframe. We believe your personal data belongs to you — we hold only a temporary permission to use it for the purposes you have agreed to.

As for cookies, RioStar uses them for specific, limited purposes only. We do not sell your cookie data to advertisers or marketing companies. The analytics cookies we use help us understand which parts of the platform see the most activity — for example, whether more Malaysian players access the slots section compared to Sports Betting, or whether the mobile interface works as well for Android users as it does for iPhone users. These insights help us make better development decisions to improve your experience.

For members who are mindful of their digital footprint, RioStar offers several options. You can disable non-essential cookies through your browser settings. You can opt out of marketing communications from RioStar — though you will still receive important account-related notifications. And if you decide to close your account, we will delete your data in accordance with the retention schedule set out in this Privacy Policy, except for data that must be retained for legal reasons.

In closing, RioStar believes that a responsible online entertainment platform must treat player privacy not as a box to be ticked, but as a value demonstrated through concrete action. We are continuously working to improve how we protect your data, and we welcome any feedback or enquiries that can help us in this effort. Contact us at support@riostar.best — we're here to listen and help.

Questions About RioStar's Privacy Policy?

If you have any questions about how RioStar handles your personal data, or wish to exercise your data rights, our team is available 24 hours a day in Bahasa Malaysia. We are committed to providing clear and honest responses within 3 business days.

Contact us at support@riostar.best or read Terms & Conditions for more information.

Join a Platform You Can Trust

RioStar – Safe Entertainment with Guaranteed Privacy for Malaysian Players

Sign up now and enjoy live casino, sports, slots, lottery and roulette on a platform that puts your security and data privacy first, every time. Over 500,000 Malaysian players already trust RioStar.

256-bit SSL Protected No Data Sales Full data control in your hands
SSL
256-bit Encryption
0
Data Sales
24/7
Secure Monitoring
500K+
Trusted Members
Bahasa Melayu