Official Document

riostar Privacy Policy

riostar takes our responsibility regarding your personal information seriously. This policy clearly explains how we collect, store, use and protect your data as part of our commitment to security and trust.

Effective: January 2026
Full Data Protection
Internationally Licensed
SSL/TLS Encryption

Why Your Privacy Matters to riostar

Every piece of information you provide to us is handled with full professionalism and subject to strict protection.

Multi-Layer Data Security

All your personal and financial information is stored on servers protected with industry-grade encryption. Access to your data is granted only to authorised personnel.

Secure Identity Verification

The riostar account verification process is designed to ensure that only the legitimate account owner can access personal information and carry out financial transactions.

No Sharing Without Consent

riostar does not sell, rent or share your personal information with third parties for marketing purposes without first obtaining your explicit consent.

Transparent and Clear Policy

We provide complete and easy-to-understand information about how your data is used so you can make informed decisions about your account privacy.

Regular Updates

This Privacy Policy is updated from time to time to reflect changes in our services, technology or legal compliance requirements. We will notify you of any material changes.

Privacy Support 24/7

If you have any questions about your data privacy at riostar, our customer support team is available via live chat and email, 24 hours a day, 7 days a week.

Last Updated: 1 January 2026. By continuing to use riostar services after this date, you agree to the terms in this updated Privacy Policy.

Definitions and Scope

This Privacy Policy ("Policy") is published by riostar ("we", "our platform") and applies to all individuals ("you", "user", "player") who use the riostar.app website or any related services we provide.

"Personal Information" refers to any data that can identify you directly or indirectly, including but not limited to your full name, identification card number (MyKad), mobile phone number, email address, financial information, transaction history and your gaming activity on our platform.

This Policy covers all activities that take place on the riostar platform, including account registration, deposits and withdrawals, online slot games, live casino, sports betting, and any communications with our customer support team.

Information We Collect

riostar collects various categories of information to ensure a safe, legitimate and high-quality service for all players.

Information You Provide Directly

  • Full name as it appears on your MyKad or passport
  • Identification card number (MyKad) or passport number for identity verification purposes
  • An active email address
  • Mobile phone number for two-factor authentication
  • Date of birth to verify the minimum age requirement of 21 years
  • E-wallet account information (Touch 'n Go eWallet, ShopeePay), DuitNow account, FPX online banking or crypto wallet address you use for transactions
  • Communication history with our customer support team

Information Collected Automatically

  • IP address and general geographic location (country level only)
  • Device type, operating system and web browser used
  • Gaming, betting and transaction history on our platform
  • Session data including login and logout times
  • Cookie data and device identifiers
⚠️ Important Note: riostar does not store full credit or debit card numbers on our servers. Any card payment processing is handled through third-party payment processors that comply with PCI-DSS security standards.

Purpose of Use of Information

The information we collect is used for the following purposes directly related to the operation of the riostar platform:

Account Management and Compliance

Your identification information is used to register and verify your account, confirm that you meet the minimum age requirement of 21 years, and comply with Know Your Customer (KYC) requirements under our international licensing framework. This is a mandatory requirement that cannot be waived.

Financial Transaction Processing

Financial information is used solely to process deposits using methods such as Touch 'n Go eWallet, DuitNow, FPX, ShopeePay and crypto assets (USDT, BTC, ETH), and also to process withdrawals to your account. All deposit and withdrawal transactions have a minimum limit of RM50.

Security and Fraud Prevention

Activity and location data is used to detect unusual patterns that may indicate fraud attempts, multiple account use or money laundering activity. These measures protect all users of the riostar platform.

Service Improvement

Aggregated usage information (without identifying individuals) is used to analyse platform performance, improve user experience and develop new features relevant to Malaysian players.

Service Communications

We will contact you by email or mobile phone for matters such as transaction confirmations, account security notifications, policy updates, and responses to your customer support enquiries.

Sharing Information with Third Parties

riostar does not sell your personal information to any third party. However, there are limited situations where we may need to share your information:

Trusted Service Providers

We work with third-party service providers acting as data processors on our behalf, including payment processors, identity verification service providers and cloud service providers. All these parties are bound by strict confidentiality agreements and are only permitted to use your information for the specified purposes.

Legal Requirements

riostar may need to disclose your personal information when required by law or a valid court order, or when necessary to protect the rights, property and safety of riostar and its users.

Regulatory Authority Oversight

As a platform operating under international licensing, riostar may need to submit transaction records or account information to the relevant regulatory authorities when there is a requirement for a legitimate official investigation.

🛡️ Our guarantee: We have never and will never share your information with advertisers or third-party marketers without your explicit prior consent.

Cookies and Tracking Technologies

riostar uses cookies and similar tracking technologies to operate the platform more effectively. Cookies are small text files stored on your device by your web browser.

Types of Cookies We Use

  • Essential Cookies: Required for basic platform functions such as maintaining login sessions and managing security preferences. These cookies cannot be disabled.
  • Performance Cookies: Collect anonymous information about how visitors use our platform to help us improve functionality and performance.
  • Preference Cookies: Allow the platform to remember your choices such as language and display settings.

You can manage cookie settings through your web browser settings. However, disabling essential cookies may affect account functionality and your ability to log in to riostar.

Data Retention Period

riostar retains your personal information for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. Specifically:

  • Active account records: Retained for the duration your account is active and until you request account closure
  • Financial transaction records: Retained for a minimum of seven (7) years for compliance and auditing purposes
  • Customer support communication logs: Retained for three (3) years from the date of communication
  • Login and security data logs: Retained for twelve (12) months

After the retention period ends, your information will be securely deleted or anonymised in accordance with our data management procedures.

Security Measures

riostar implements various appropriate technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration or destruction.

  • SSL/TLS encryption for all data transmission between your device and our servers
  • Data encryption at rest for sensitive information stored in our databases
  • Role-based access controls to ensure only authorised personnel can access specific data
  • Regular security audits and penetration testing by independent third parties
  • Two-factor authentication (2FA) for user account logins and internal administrative access
  • 24/7 monitoring to detect and respond to any security threats

While we take reasonable precautions, no system is completely secure. We encourage you to also protect your account by using a strong, unique password and not sharing your login credentials with anyone.

Cross-Border Data Transfers

As riostar operates under international licensing, some of your personal information may be processed or stored on servers located outside Malaysia. In such cases, we ensure that protection equivalent to or higher than local data protection requirements is observed.

All cross-border data transfers are carried out under appropriate safeguards, including legally binding data processing agreements with the receiving parties.

Your Rights Over Personal Data

As a riostar user, you have the following rights regarding the personal data we hold about you.

01

Right of Access

You have the right to request a copy of the personal information we hold about you at any time.

02

Right to Rectification

You have the right to request correction of any inaccurate or incomplete information in our records.

03

Right to Erasure

You may request that we delete your personal data under certain circumstances provided for by law.

04

Right to Object

You have the right to object to the processing of your personal data for certain purposes, such as marketing communications.

05

Right to Restriction of Processing

In certain situations, you may ask us to limit how we process your information.

06

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format.

07

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

08

How to Contact Us

Send your data rights request to our support team via live chat or email. We will respond within a reasonable timeframe.

Important Note: Some of the rights above may be subject to certain conditions or limitations, particularly where we have a legal obligation to retain your data (for example, financial transaction records). Our team will explain these situations to you clearly when you submit any request.

Your Data is Safe with riostar

Now you know how we protect your privacy. Register an account and enjoy a range of slot games, live casino and sports betting with full confidence.

Privacy-Related Frequently Asked Questions

Answers to questions commonly asked by riostar players about our privacy policy and data protection.

During registration, riostar requires your full name, MyKad or passport number, date of birth (to verify the minimum age of 21+), an active email address and mobile phone number. This information is required to comply with KYC requirements under our international licensing framework and to ensure the security of your account.

riostar does not sell or rent your personal information to third parties. We only share data with service providers acting on our behalf (such as payment processors) and they are bound by strict confidentiality agreements. In situations required by law, we may need to disclose information to the relevant authorities.

You can submit a data access request via live chat or email to the riostar customer support team. Please state clearly that you are making a request based on your data access rights. We will verify your identity first before processing the request.

Financial transaction records are kept for seven (7) years after account closure to meet legal and auditing requirements. Customer support communication logs are kept for three (3) years. Other data not subject to legal retention obligations will be deleted or anonymised within a reasonable period after account closure.

Yes. All transactions through Touch 'n Go eWallet, DuitNow, FPX, ShopeePay and crypto are processed with SSL/TLS encryption. riostar does not store full card numbers on our own servers. The third-party payment processors we use comply with the highest industry security standards.

When there are material changes to this Privacy Policy, riostar will notify you by email or in-platform notification before the changes take effect. The latest update date is always displayed at the top of this page. Continued use of our platform after notification is considered acceptance of the updated terms.

You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link found in any promotional email, or by contacting our customer support team via live chat. Please note that even if you unsubscribe from marketing, we still need to send important transactional communications such as deposit confirmations or account security notifications.