Last Updated: 1 January 2026

F168 Privacy Policy – Player Data Protection in Malaysia

Your privacy is our priority. This document explains precisely what data f168 collects, how it is used, who can access it, and what your rights are as a player. We have written this in plain language so you can genuinely understand it — not just wade through vague legal text.

F168 complies with Malaysia's Personal Data Protection Act 2010 (PDPA). All your personal data is processed lawfully, fairly, and transparently. You have the full right to access, correct, or request deletion of your data at any time by contacting support@f168-app.net.

AES-256 Encryption
Malaysia PDPA
No Data Selling
24×7 Support
TnG & DuitNow

F168's Privacy Commitment to Malaysian Players

Six data protection principles we apply every day to safeguard your information.

Bank-Grade Encryption

All data transmitted between your browser and f168's servers is protected with SSL TLS 1.3 and AES-256 encryption — the same standard used by Maybank and CIMB Bank. This means your phone number and payment details via Touch 'n Go or DuitNow never travel across the internet as plain text that anyone could read.

Your Data is Never Sold

F168 never sells, rents, or trades players' personal data to any third party for marketing purposes. The information you provide during registration and platform use — your name, phone number, and gaming records — remains within f168's systems and is not transferred to any outside party except as required by law or with your explicit consent.

You're in Control

You may access, correct, or request deletion of your personal data at any time through your account settings or by contacting our team. Data access requests are responded to within 14 business days. Deletion requests are processed within 30 days, subject to record retention requirements mandated under Malaysian law.

PDPA Malaysia Compliant

All of f168's data processing practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This includes obtaining valid consent before processing data, limiting data collection to only what is strictly necessary, ensuring data accuracy, and providing straightforward mechanisms for players to exercise their rights under the PDPA.

Marketing Communication Preferences

F168 will not send you any marketing communications without your consent. During registration, you may choose whether to receive promotions via SMS or platform notifications. This preference can be changed at any time in your account settings. Opting out of marketing communications will not affect your platform services.

Data Breach Reporting

In the event of a data security breach affecting your personal information, f168 is committed to notifying you within 72 hours of confirming the breach — in line with global best practices. We will explain what data was involved, the potential risks, and the steps we have taken to address the situation.


Important Note: This Privacy Policy explains how f168 collects, processes, stores, and protects your personal data as a platform user. It takes effect from 1 January 2026 and should be read alongside f168's Terms & Conditions. By using the f168 platform, you agree to the data processing practices described here.

Personal Data We Collect

F168 collects your personal data through several different channels. We only collect what is strictly necessary to provide our platform services to you and to meet our legal obligations. Below are the categories of data we collect and how we collect them.

1.1 Data You Provide Directly

Data CategoryExamplePrimary Purpose
Registration InformationFull name, Malaysian phone number, passwordAccount & Login
Verification InformationIdentity document (if requested)KYC & Security
Financial InformationPayment methods (TnG, GrabPay, DuitNow, FPX)Deposits & Withdrawals
CommunicationsMessages to the support team, complaintsCustomer Support
Account PreferencesLanguage, communication preferences, self-imposed gaming limitsPersonalise Your Experience

1.2 Automatically Collected Data
When you use the f168 platform, our systems automatically record certain technical information required for platform operations and account security:

  • IP address and general location information (state/city) — for security verification and detecting unauthorised access.
  • Device information: device type, operating system, browser version — to optimise how the platform displays on your screen.
  • Session data: login times, session duration, and pages visited within the platform — used for account security and user experience improvements.
  • Gaming activity records: types of games played (baccarat, poker, Super League football betting, badminton, and others), bet amounts, and game outcomes — used for bonus calculation, fraud detection, and licensing compliance.
  • Financial transaction records: date, time, amount and method (Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost or ShopeePay) for all deposits and withdrawals in MYR.

1.3 Data from Third Parties
In certain cases, f168 may receive information about you from legitimate third-party sources, including identity verification service providers we use for the KYC (Know Your Customer) process, payment service providers that process your financial transactions, and regulatory or law enforcement bodies where required by law. This data is used solely for the stated purposes and is subject to the same protections as data you provide directly.

How We Use Your Data

F168 uses your personal data only for limited, specific purposes. We do not process your data for anything unrelated to delivering our platform services without your consent. Below are the primary purposes for which f168 processes your data.

2.1 Provision of Platform Services
This is the primary purpose of data collection — to enable you to use the f168 platform in full. This includes processing account registration and verification, processing deposits and withdrawals in MYR via your chosen Malaysian payment methods, calculating and crediting promotional bonuses such as the Welcome Bonus, providing access to all games and services on the platform, and maintaining accurate betting and transaction records for your reference.

2.2 Security & Fraud Detection
f168 uses technical data and activity records to detect and prevent fraud, money laundering, collusion, and platform abuse. This is a legal requirement under Malaysia's anti-money laundering (AML) regulations and also protects the interests of all honest players on our platform. We may use automated analytics systems to identify patterns of suspicious activity.

2.3 Platform Enhancements & User Experience
Anonymised, aggregated usage data — which cannot be traced back to any individual — is used to understand how players use the f168 platform and to make meaningful improvements. For example, usage data helps us identify that Malaysian players are highly active in live match betting on the Malaysia Super League and BWF badminton, which allows us to prioritise enhancements in those areas.

2.4 Service Communications
We use your phone number to send important service communications, including OTP verification during login, successful deposit and withdrawal notifications, account security alerts, and updates on significant changes to the platform's terms or policies. These service communications are essential to the operation of your account and cannot be opted out of.

2.5 Marketing Communications (Optional)
With your consent, f168 may send you information about new promotions, special bonuses such as live match cashback or poker tournaments, and platform updates. You may withdraw this consent at any time through your account settings or by contacting support@f168-app.net.

2.6 Legal Compliance & Responsible Gaming
f168 uses gaming activity data to fulfil our responsible gaming obligations — identifying players who show signs of a gambling problem and reaching out to them with appropriate support. This forms part of our broader commitment to the wellbeing of Malaysia's player community.

Data Sharing with Third Parties

F168 does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. However, there are limited situations where we need to share your data with trusted third parties to enable platform operations or to fulfil our legal obligations.

3.1 Payment Service Providers
When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, DuitNow, FPX (Maybank2u, CIMB Clicks), Boost, or ShopeePay, the necessary transaction information is shared with the respective payment provider to process your payment. This data is shared under strict security protocols, and these providers are governed by their own privacy policies as well as Bank Negara Malaysia regulations.

3.2 Technology Service Providers
f168 works with trusted third-party technology service providers for specific functions such as cloud server infrastructure, identity verification systems, and customer support platforms. These providers may only access your data to the extent necessary to carry out their designated tasks, and they are bound by strict data protection agreements with f168.

3.3 Legal Requirements
f168 may disclose your data to Malaysian government authorities or law enforcement agencies if required by a court order, warrant, applicable legislation, or a legitimate request from a regulatory body. We will notify you of such disclosure where permitted by law to do so.

F168 has no co-marketing arrangements or data-sharing programmes with any other gambling or non-gambling companies. Your information is never used to build marketing profiles that are sold to third parties in any form.

Data Security

Protecting your personal data is a responsibility we take seriously. f168 continuously invests in security infrastructure to ensure your data is protected to the highest technically practicable standard.

4.1 Technical Security Measures

  • Data Encryption in Transit: All data transmitted between your device and f168's servers is protected with SSL/TLS 1.3 — the latest encryption standard used by Malaysia's leading financial institutions.
  • Stored Data Encryption: Sensitive data such as payment information and transaction records are stored with AES-256 encryption in secured databases.
  • Network Isolation: f168's database servers are not directly accessible from the internet and are isolated behind multiple layers of firewalls.
  • 24/7 Security Monitoring: An automated threat detection system monitors all f168 servers around the clock for suspicious activity.
  • Regular Security Audits: f168 conducts regular penetration testing and independent security audits carried out by third-party security firms.
  • Internal Access Controls: f168 staff may only access user data when there is a legitimate work-related need to do so, and all access is logged and monitored.

4.2 Your Role in Data Security
While f168 takes all reasonable steps to protect your data, the security of your account also depends on your own actions. We recommend using a strong, unique password for your f168 account, never sharing your login credentials with anyone, staying alert to phishing attempts impersonating f168, and contacting us immediately if you suspect your account has been accessed without your authorisation.

Cookies and Tracking Technologies

F168 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the f168 platform.

5.1 Types of Cookies Used

  • Essential Cookies (Required): These cookies are required for the platform's core functions, such as maintaining your login session, remembering your language preference, and securing forms. Without them, the platform will not work properly. They cannot be disabled.
  • Functional Cookies (Optional): Allows the platform to remember your preferences, such as display settings and game choices, to deliver a more personalised experience. Can be disabled without affecting core functionality.
  • Analytics Cookies (Optional): Collects anonymised information about how the platform is used for improvement purposes. This data cannot be traced to any individual. Can be disabled in the platform's cookie settings.

5.2 Managing Your Cookie Preferences
You can manage your cookie preferences through your web browser settings. Most browsers allow you to view, delete, or block cookies. Please note that blocking essential cookies may affect your ability to log in or use certain features on the f168 platform. For guidance on managing cookies in your browser, please refer to the relevant browser's help documentation.

Data Retention Period

F168 retains your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required under applicable Malaysian law. Below is a general guide to data retention periods by category.

  • Active Account Data: For as long as your account remains active and you continue using the f168 platform. Data is updated continuously while the account is active.
  • Financial Transaction Records: Minimum 7 years from the transaction date, in accordance with Malaysia's anti-money laundering laws and applicable financial reporting regulations.
  • Support Communication Records: 3 years from the date of last communication, for reference in the event of any subsequent dispute or complaint.
  • Analytics Cookie Data: Maximum 13 months from the date of collection, after which it is deleted or fully anonymised.
  • Data Following Account Closure: Basic identification information and financial transaction records are retained for the period required by law even after account closure. Other data not required by law is deleted within 30 days of account closure.

When data is no longer needed and there is no legal obligation to retain it, f168 will securely delete or anonymise it using procedures that ensure it cannot be recovered.

Your Rights Under Malaysia's PDPA

As an individual whose data is processed by f168, you have certain rights under Malaysia's Personal Data Protection Act 2010 (PDPA). f168 respects and facilitates the exercise of these rights. Below is a summary of your rights and how to use them.

Right of Access

You have the right to request a copy of the personal data we hold about you. Requests are processed within 14 business days. A nominal fee may apply for physical copies if requested.

Right to Correction

If your personal data is inaccurate or out of date, you may request a correction. Basic information such as your phone number can be updated directly in your account settings.

Right to Erasure

You may request the deletion of your personal data, subject to our legal obligations to retain certain records. Requests are processed within 30 days.

Right to Restrict Processing

You may request that f168 stop processing your data for marketing purposes or in certain other situations permitted under the PDPA.

Data Portability Rights

You may request the data you have provided to f168 in a machine-readable format for the purpose of transferring it to another service, where applicable.

Right to Object

You may object to the processing of your data for specific purposes, including direct marketing. Marketing objections take effect immediately upon receipt.

To exercise any of the rights above, send a written request to support@f168-app.net stating the specific right you wish to exercise, your account information, and a brief description of your request. We may require identity verification before processing certain requests in order to protect your privacy.

Children's Data

The f168 platform is strictly for individuals aged 18 and above. f168 does not knowingly collect, process, or store personal data from individuals under the age of 18.

If you are a parent or guardian and believe that your underage child has registered an account on f168 or provided us with their personal data, please contact us immediately at support@f168-app.net. We will take appropriate steps to delete the information and close the account without delay.

F168 performs age verification during the registration process and may request proof of age as part of account verification. We also use detection systems to identify accounts that may belong to underage individuals based on usage patterns and information provided.

Amendments to the Privacy Policy

F168 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or improvements in how we explain our policies to you.

When we make material changes to this Privacy Policy, we will notify you via an in-platform notification and/or email before the changes take effect. Material changes include any changes involving new types of data collected, new processing purposes, or changes to your rights.

It is good practice to review this page periodically. The date of the most recent update is always shown at the top of this document. If you continue using the f168 platform after any changes take effect, this will be considered your acceptance of the updated policy.

Document Information

This Privacy Policy takes effect from 1 January 2026 (Version 3.1) and supersedes all previous versions. Written in Bahasa Malaysia for Malaysian players. In the event of any conflict between different language versions, the Bahasa Malaysia version shall prevail.

Contact f168's Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or how f168 handles your personal data, please contact us through the channels below. We aim to respond to all privacy-related enquiries within the stated timeframe.

Privacy Email

Support@f168-app.net

Response within 2–5 business days for privacy matters. Please include "Privacy Enquiry" in your email subject line.

Live Chat 24/7

Available on the f168 platform

Suitable for general enquiries. For complex privacy matters, email is recommended.

Formal PDPA Complaint

Malaysia's Department of Personal Data Protection

If you are not satisfied with f168's response, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia.

Your Privacy, Our Priority – More Than Just a Written Policy

Most people open a platform's Privacy Policy, scroll briefly, and close it without actually reading it. We get it — these documents tend to be long and technical. That is why we have made every effort to write the f168 Privacy Policy in a way that is easy to understand, specific, and honest. This is not just a document to satisfy legal requirements — it is a genuine commitment to every f168 player in Malaysia.

As a player using the f168 platform to bet on Malaysia Super League football, BWF badminton, MPL Malaysia esports, or to play baccarat and poker, you are entrusting us with important information — your phone number, your Touch 'n Go or DuitNow payment details, your gaming activity records. We do not take that trust lightly.

In a world where personal data is often treated as a business commodity, f168 makes a different choice. We do not sell our players' data to any party. We do not build marketing profiles to be sold to insurance companies, banks, or advertisers. Your gaming and financial data — how much you deposit, what you play, how much you win or lose — is personal information we protect to the fullest extent of our technical capabilities and internal procedures.

One thing we want to be upfront about: f168 uses gaming activity data for a purpose you may not expect — to look out for your wellbeing as a player. When our system detects patterns that may indicate a gambling problem, such as a sudden spike in deposits following a losing streak or unusually prolonged gaming sessions, our team will proactively reach out to that player and offer support. This is not a legal requirement — it is an ethical choice f168 makes because we genuinely care about our player community.

We also want you to know that when you make transactions in MYR via Touch 'n Go eWallet, GrabPay, DuitNow or FPX, your financial information is processed through payment systems regulated by Bank Negara Malaysia. f168 does not store your card number or full bank account details — we only receive confirmation that your payment has been successfully processed.

Finally, we want you to know that our door is always open. If you have any questions about your data, how it is used, or would like to request access to the records we hold, reach out to us at support@f168-app.net. Our team will respond with clarity and honesty — not with templated, evasive answers. Because ultimately, the trust you place in f168 is the foundation of everything we build.

Summary of f168's Privacy Commitments
Your data is never sold to any third party for marketing purposes.
AES-256 encryption for all stored data.
Fully compliant with Malaysia's PDPA 2010.
Rights to access, correct, and delete your data are available.
TnG/DuitNow/FPX financial information is not stored by f168.
Data breach notification within 72 hours in the event of an incident.
Marketing communications preferences — unsubscribe at any time.

FAQ – Privacy & Data at f168

The questions Malaysian players most frequently ask about how f168 handles their personal data.

No. f168 does not store your eWallet account number, card number, or online banking login details. When you make a deposit via Touch 'n Go eWallet, GrabPay, DuitNow, FPX, Boost, or ShopeePay, you are redirected to the payment provider's secure payment page. f168 only receives confirmation from the payment provider that a transaction in MYR was successful — not your account details. Your payment information is processed directly by service providers regulated by Bank Negara Malaysia.

Yes, you may exercise your Right of Access under Malaysia's PDPA to request a full list of personal data we hold about you. Submit a written request to support@f168-app.net with the subject line "PDPA Data Access Request", along with your full name and f168 account number. We will process the request within 14 business days and send your data report via secure email. We may require identity verification before disclosing the information to protect your privacy.

When you close your f168 account, we will delete or anonymise personal data that is no longer required within 30 days. However, financial transaction records and legal compliance records are retained for a minimum of 7 years in accordance with Malaysian anti-money laundering and financial record-keeping requirements. This data is not accessible to f168's regular operations team and may only be accessed in the event of a legitimate legal investigation.

Your personal gaming records — including baccarat game history, poker hands, Super League or badminton betting records — are never shared with any third party for commercial or marketing purposes. This data is used internally by f168 for bonus calculations, fraud detection, compliance audits, and responsible gaming support. Anonymised aggregate data (e.g., "30% of f168 players play baccarat daily") may be used for internal analytics purposes but cannot be traced back to any individual.

At registration, you verify your age through a written declaration. For withdrawals above a certain threshold, or if the system detects inconsistencies, f168 will request document verification such as a MyKad or passport. If an account is found to belong to an underage user, it will be terminated immediately. Conversely, if you believe your account has been flagged as underage in error, please contact our support team with valid identification documents for resolution within 2 business days.

To stop receiving promotional SMS or notifications from f168, you can update your communication preferences in your account settings under "Notification Preferences", or send an email to support@f168-app.net stating "Unsubscribe Promotional SMS" along with your phone number. The request will be processed within 2 business days. Please note that opting out of marketing communications will not affect essential service messages such as login OTPs or transaction confirmations — these are security communications required to protect your account.
f168 Privacy Policy & Terms of Use – How They Work Together

This Privacy Policy forms part of the full agreement between you and f168 as a platform user. It should be read alongside f168's Terms & Conditions, which cover platform usage rules, bonus terms, game rules, and liability limits. Together, these two documents form the legal basis of the relationship between you and f168.

To fully understand your rights and responsibilities: Read the full f168 Terms & Conditions →

Privacy & Responsible Gaming – Two Sides of f168's Commitment

Privacy protection and responsible gambling are two core values that go hand in hand at f168. Your gaming activity data — which we strictly protect from outside parties — is used internally to help our platform identify and support players who may be experiencing gambling-related difficulties. This is one of the ways your data genuinely works in your own interest.

Play Pattern Monitoring

Gaming data is analysed to identify patterns that may indicate problem behaviour — it is not sold or shared with third parties.

Personal Financial Limits

Set deposit and loss limits within your account. These settings are kept entirely private and can only be changed by you.

Play Break

Play break requests are processed immediately and confidentially. Your decision to take a break is respected, no questions asked.

Confidential Support

Conversations about gambling concerns with our team are completely confidential and will not affect your account status.

Important Notice: Gambling carries financial risk. Only play with money you can afford to lose. If you feel gambling is starting to affect your life, seek help immediately. Read f168's Responsible Gaming guide →

Your Data is Safe at f168 – Join with Confidence

Over 500,000 Malaysian players trust f168 with their personal data every day. Register for free, deposit from as little as RM10 via Touch 'n Go or DuitNow, and enjoy a platform experience that is secure, transparent, and personalised for you.

Bahasa Melayu