Reze88 Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which Reze88 ("the Company", "we", "us", "our") collects, processes, stores, and shares personal data in connection with your use of the Reze88 online gaming and sports betting platform, accessible at reze88.cam and all associated interfaces and services (the "Platform").

Reze88 respects the privacy of all users and is committed to processing personal data responsibly and in compliance with applicable data protection laws, including the Malaysian Personal Data Protection Act 2010 (PDPA) and relevant international standards where applicable.

By registering an account, accessing the Platform, or otherwise interacting with our Services, you acknowledge that you have read and understood this Policy, and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform immediately.

For the purposes of this Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial information, and online identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" means Reze88, the entity that determines the purposes and means of Processing Personal Data.
• "Data Subject" means the natural person to whom Personal Data relates — in the context of this Policy, this is the Account holder or Platform user.
• "Third Party" means any natural or legal person other than the Data Subject, the Data Controller, or persons authorised under the direct authority of the Data Controller.
• "Cookies" means small data files placed on your device by the Platform for the purposes of session management, analytics, and personalisation.
• "KYC" means Know Your Customer verification, a regulatory compliance process involving the collection and verification of identity and address documents.
• "PDPA" refers to the Personal Data Protection Act 2010 of Malaysia (Act 709), which governs the processing of personal data in commercial transactions in Malaysia.

Reze88 collects the following categories of Personal Data from users:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or with your explicit consent.

Reze88 collects Personal Data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically as you navigate the Platform, including through cookies, server logs, and similar tracking technologies that record your IP address, device identifiers, and browsing behaviour.
• Payment processors: When you use payment methods such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, or direct banking with institutions including Maybank, CIMB, Public Bank, RHB, and Hong Leong Bank, relevant transaction data is passed to us by these processors for reconciliation and fraud prevention purposes.
• Third-party verification services: Identity verification and anti-fraud data sourced from KYC service providers and credit reference agencies as part of our compliance obligations.
• Publicly available sources: In limited circumstances, information from publicly accessible registers or databases may be referenced for compliance or fraud investigation purposes.

Reze88 processes Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform our contractual obligations to you as a registered user of the Platform — including account management, transaction processing, and the delivery of gaming services.
• Legal obligation: Processing necessary for compliance with applicable laws and regulations, including anti-money laundering (AML) obligations, counter-terrorism financing (CTF) requirements, KYC mandates, and tax reporting duties.
• Legitimate interests: Processing carried out to pursue our legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gambling monitoring — where such interests are not overridden by your rights and freedoms.
• Consent: Where we rely on consent as a legal basis (principally for direct marketing communications), you may withdraw that consent at any time by adjusting your marketing preferences in Account Settings or by contacting our support team.

Reze88 uses your Personal Data for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and authenticate your login sessions.
• Service delivery: To process your deposits, withdrawals, bets, and gaming activity, and to credit bonuses, loyalty points, and promotional rewards to your Account.
• Regulatory compliance: To fulfil KYC, AML, and CTF obligations; to conduct due diligence reviews; and to respond to lawful requests from regulatory authorities, law enforcement agencies, or courts of competent jurisdiction.
• Fraud and security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other unlawful or prohibited activities on the Platform.
• Responsible gambling: To monitor player behaviour for indicators of problem gambling, enforce self-exclusion requests, implement deposit limits, and deliver responsible gambling communications in accordance with our Responsible Gambling Policy.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services based on interaction history.
• Platform improvement: To analyse usage patterns, conduct user experience research, and develop or test new features and services.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and news about Reze88 services where you have opted in to receive such communications.

Reze88 does not sell, rent, or trade your Personal Data to third parties for commercial purposes. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers: Including e-wallet operators (Touch 'n Go eWallet, Boost, GrabPay), FPX and DuitNow infrastructure providers, and major Malaysian banking partners (Maybank, CIMB, Public Bank, RHB, Hong Leong), solely for the purpose of processing your transactions.
• Identity verification and KYC providers: Third-party compliance and identity verification service providers engaged to assist with our regulatory obligations.
• Fraud prevention and security services: Specialist security vendors who assist in detecting and preventing fraudulent activity on the Platform.
• IT and platform infrastructure providers: Cloud hosting, data storage, and software service providers under contractual data processing agreements that require them to maintain the same standards of data protection as Reze88.
• Regulatory authorities and law enforcement: Where required or permitted by applicable law, including the Royal Malaysia Police, Bank Negara Malaysia, or other government bodies with lawful authority to request such disclosure.
• Professional advisers: Solicitors, accountants, auditors, and insurers who provide professional services to Reze88 under duties of confidentiality.

All third-party data processors engaged by Reze88 are subject to contractual data processing agreements that require them to process your Personal Data only on our instructions and in accordance with applicable data protection law.

Reze88 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session integrity, and collect analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Enable personalisation features such as remembering your language preferences, previously visited game categories, and responsible gambling settings.
• Analytical Cookies: Used to collect aggregated, anonymised information about how users interact with the Platform, including page visit frequency and navigation patterns. This data is used to improve Platform performance and user experience.
• Security Cookies: Used for fraud detection and prevention purposes, including identifying irregular login behaviour and flagging potentially compromised sessions.

Reze88 does not use third-party advertising cookies or share behavioural data with external advertising networks.

Reze88 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following indicative retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure, in accordance with AML and financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a specific regulatory investigation or legal proceeding.
• Customer support communications: Retained for up to three (3) years from the date of the interaction, unless retained for longer in connection with a dispute or regulatory matter.
• Analytical and usage data: Aggregated or anonymised data retained indefinitely for statistical purposes. Identifiable usage logs retained for up to twenty-four (24) months.
• Marketing consent records: Retained for the duration of the Account and for up to three (3) years following Account closure to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

Reze88 implements a comprehensive information security programme incorporating technical, organisational, and procedural measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport security: All data in transit between your device and Reze88 servers is protected by TLS 1.2 or higher encryption protocols. Our Platform enforces HTTPS across all pages and API endpoints.
• Data at rest: Sensitive Personal Data stored on our servers is encrypted using industry-standard AES-256 encryption.
• Access controls: Access to Personal Data is restricted on a strict need-to-know basis, with role-based access controls, multi-factor authentication for administrative access, and comprehensive audit logging.
• Penetration testing: Regular independent security assessments and penetration testing are conducted to identify and remediate vulnerabilities.
• Incident response: Reze88 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in risk to affected individuals, we will notify relevant authorities and affected users within the timeframes required by applicable law.

Notwithstanding our security measures, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the security of your Account credentials and for notifying us promptly at [email protected] if you suspect unauthorised access to your Account.

As a Data Subject, you have the following rights in respect of your Personal Data held by Reze88. These rights are subject to applicable legal limitations and exemptions:

To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) days of receipt of a valid request. We may require proof of identity before processing your request.

In the course of providing our Services, your Personal Data may be transferred to and processed in countries outside of Malaysia. Such transfers may occur when our IT infrastructure, cloud service providers, or KYC partners are located in third countries.

Reze88 ensures that any international transfer of Personal Data is subject to appropriate safeguards, which may include standard contractual clauses, binding corporate rules, or transfers to jurisdictions recognised as providing adequate levels of data protection. Where transfers are made to third-party processors in other jurisdictions, such processors are required to maintain data protection standards equivalent to those applicable under Malaysian law.

The Reze88 Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect or process Personal Data from individuals under the age of 21. Age verification is conducted as part of the KYC process, and any Account found to belong to a person under 21 will be closed immediately, with all deposits returned and no bonuses disbursed.

If you have reason to believe that a minor has provided Personal Data to Reze88, please contact us immediately at [email protected] so that we may take appropriate action, including deletion of the relevant data.

Reze88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or Platform services. The revised Policy will be published on this page with an updated "Last Updated" date.

Where amendments are material in nature, we will endeavour to notify registered users by email or by a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following publication of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to remain informed of how Reze88 protects and handles your Personal Data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact Reze88 through the following channels:

• Live Chat: Available 24/7 through your Account dashboard. For data-related queries, please select the "Privacy & Data" category when initiating the chat.
• Email: [email protected] — please include "Privacy Policy Enquiry" or "Data Rights Request" in the subject line for priority routing.

Our support team is available around the clock and is fully equipped to handle data protection enquiries in English. Peak staffing is maintained during Malaysian business hours (MYT, UTC+8). We service users across Malaysia, including Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam, Ipoh, and all other regions.