Privacy Policy Reze88 – Our Commitment to Protecting Your Personal Data

1Introduction

Reze88 ("we", "the platform") respects the privacy of every individual who interacts with our services. This Privacy Policy sets out in detail how we collect, use, store, protect, and in certain circumstances share the personal data of members using our online casino and Sports Betting platform at reze88.biz.

This Privacy Policy applies to all users of the Reze88 platform, including those who browse our website, register an account, make deposits, play games, place sports bets, or interact with our customer support team. It covers all ways you can access Reze88 – via a web browser on a desktop, tablet, or smartphone, as well as through the Reze88 mobile app for iOS and Android.

This document should be read together with Reze88's Terms and Conditions and our Responsible Gaming Policy. All these documents collectively form a comprehensive agreement between you and Reze88 regarding your use of our platform and services.

2Personal Data We Collect

Reze88 collects several categories of personal data from members and prospective members. Below is a detailed description of each category:

Reze88 does not collect sensitive data such as health information, religious beliefs, political views, or criminal records unless specifically required by applicable anti-money laundering laws. In such cases, the purpose of collection will be clearly communicated to the members concerned.

3How We Collect Your Data

Reze88 collects members' personal data through several different channels:

• Direct account registration – when you complete the Reze88 registration form with your name, email address, phone number, and chosen password.
• Platform usage – automatically as you browse the website, play slots, join Live Casino tables, place sports bets, or use the Reze88 mobile app.
• Financial transactions – when you make a deposit using Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX, Maybank2u, or CIMB Clicks, or when you withdraw your winnings to your account.
• Support interactions – when you contact the Reze88 support team via live chat or email, records of those conversations are retained for service quality and dispute resolution purposes.
• Cookies and tracking technologies – through cookies placed on your browser when you visit the Reze88 platform, as described in Section 9.
• Authorised third parties – in limited circumstances, Reze88 may receive data from third-party identity verification providers used for the KYC (Know Your Customer) process.

4Purposes for Using Personal Data

Reze88 uses members' personal data for specific, lawful purposes. We do not use your data for any purpose not listed here without first obtaining your consent:

• Service provision – to create and manage member accounts, process deposits and withdrawals in RM, and provide access to all Reze88 games and services.
• Identity verification (KYC) – to verify that members meet the minimum age requirement of 18 years and satisfy the anti-money laundering (AML) requirements set out under applicable law.
• Security and fraud prevention – to detect and prevent fraudulent activity, multi-account use, unauthorised bonus exploitation, and any suspicious behaviour on the Reze88 platform.
• Legal compliance – to comply with all applicable legal requirements, including financial regulations, reporting obligations, and directives from relevant authorities.
• Service improvements – to analyse platform usage patterns, identify areas for improvement, and develop better new features for Reze88 members.
• Customer support – to respond to enquiries, resolve complaints, and provide technical assistance to members who need support.
• Service communications – to send important account-related notifications, transaction updates, security alerts, and changes to Reze88's terms or policies.
• Responsible Gaming – to monitor gameplay patterns and identify members who may benefit from responsible gambling support, in line with Reze88's commitment to healthy entertainment.

5Legal Basis for Data Processing

Reze88 processes members' personal data on a valid legal basis. The basis applied depends on the type of processing being carried out:

• Contract performance – processing required to fulfil the service agreement between Reze88 and its members, including account management, financial transaction processing, and provision of access to games.
• Legitimate interests – processing for the purposes of platform security, fraud prevention, service improvement, and usage analytics that does not adversely affect members' fundamental rights and freedoms.
• Compliance with legal obligations – processing required to comply with anti-money laundering laws, KYC requirements, and reporting obligations to the relevant authorities in Malaysia.
• Consent – for marketing activities and promotional communications, Reze88 relies on explicit consent provided by members. This consent may be withdrawn at any time.

6Data Sharing with Third Parties

Reze88 does not sell members' personal data to any third party. However, in the course of operating the platform, Reze88 may share personal data with a limited category of third parties in the following circumstances:

• Payment service providers – information required to process deposit and withdrawal transactions with providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX. This sharing is kept to the minimum necessary to complete each transaction.
• Game providers – the minimum technical data required to deliver games from providers such as Pragmatic Play, Evolution Gaming, and Spribe to Reze88 members. These providers are bound by strict data protection agreements.
• Identity verification providers – when Reze88 uses third-party services for KYC processing, the minimum identity data required is shared with verified providers that comply with data protection standards.
• Regulatory authorities and law enforcement – Reze88 will disclose required data to the relevant authorities when mandated by law or a valid court order.
• Business transfer – in the event of a merger, acquisition, or transfer of Reze88's assets, member data may be transferred to the acquiring entity. Members will be notified before any such transfer takes place.

7Personal Data Security

Reze88 implements appropriate technical and organisational security measures to protect members' personal data from unauthorised access, loss, alteration, or accidental disclosure. Our security approach is multi-layered and comprehensive:

• Encryption in transit – all data transmitted between your browser or app and Reze88's servers is encrypted using TLS 1.3 with AES-256 encryption, ensuring data confidentiality in transit.
• Encryption of stored data – sensitive data such as financial information and identity verification documents are encrypted within Reze88's database using file-level encryption.
• Access control – only Reze88 staff with a legitimate business need are granted access to members' personal data, and such access is governed by the principle of least privilege.
• Continuous monitoring – Reze88's systems are monitored around the clock to detect any unauthorised access attempts or suspicious activity on the platform.
• Regular security audits – Reze88 conducts regular internal and external security audits to identify and address any vulnerabilities in our security infrastructure.
• Incident response procedures – Reze88 has a clear security incident response procedure to address any data breaches quickly and effectively, including notifying affected members within the stipulated timeframe.

While Reze88 takes all reasonable steps to protect your data, no security system can guarantee complete protection under all circumstances. We encourage members to take their own precautions, such as using strong passwords, enabling two-factor authentication, and never sharing login credentials with anyone.

8Data Retention Period

Reze88 retains members' personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy, or as required by law. Below are the retention period guidelines for key data categories:

• Active account data – retained for the duration of the member's active account plus 6 years after account closure, in line with Malaysian financial record-keeping requirements.
• Financial transaction data – deposit and withdrawal records in MYR are retained for 7 years from the transaction date for compliance with financial laws and anti-money laundering requirements.
• KYC and identity verification data – copies of identity documents are retained for 5 years after the business relationship between the member and Reze88 ends.
• Technical log data – technical logs and cookie data are retained for a maximum of 2 years for security and technical troubleshooting purposes.
• Support communication data – customer support conversation records are retained for 3 years for service quality and dispute resolution purposes.
• Marketing Data – data used for marketing communications is retained until a member withdraws their consent or closes their account, whichever comes first.

Once a retention period expires, Reze88 will securely delete or anonymise the data. Anonymised data is no longer considered personal data and may be retained indefinitely for long-term analytics purposes.

9Cookie Policy

Reze88 uses cookies and similar tracking technologies on our platform to enhance the user experience, ensure proper functionality, and understand how members interact with our platform. Below is detailed information on the types of cookies we use:

You can manage optional cookies through your browser settings. However, disabling essential cookies may affect the functionality of the Reze88 platform and could prevent you from logging in or completing transactions. Reze88 recommends keeping essential cookies enabled for the best user experience.

10Your Rights as a Data Subject

As a Reze88 member, you have certain rights regarding the personal data we process. Reze88 fully respects and supports the exercise of these rights:

• Right to access – you have the right to obtain a copy of the personal data we hold about you, including information on how it is used and with whom it is shared.
• Right to rectification – if any of your personal data is inaccurate or incomplete, you have the right to request a correction. You can update basic information directly in your Reze88 account settings.
• Right to erasure – under certain circumstances, you have the right to request the deletion of your personal data. Such requests will be assessed against legal data retention requirements, which may override this right in some cases.
• Right to restrict processing – you have the right to request a restriction on the processing of your data under certain circumstances, such as while we are verifying the accuracy of your data or processing your objection.
• Right to data portability – you have the right to receive the personal data you have provided to us in a machine-readable format and to transfer it to another service provider.
• Right to object – you have the right to object to the processing of your personal data for specific purposes, in particular for direct marketing.
• Right to withdraw consent – where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights above, contact the Reze88 privacy team at support@reze88.biz stating the right you wish to exercise and the details required to verify your identity. Reze88 will respond to your request within 30 calendar days of receiving a complete application.

11Cross-Border Data Transfers

Reze88 operates primarily for the Malaysian market, and members' personal data is stored on servers located within the Asian region. In certain circumstances, data may be processed outside Malaysia — for example, when using the services of international game providers such as Pragmatic Play or Evolution Gaming, which operate from multiple locations worldwide.

When data is transferred outside Malaysia, Reze88 ensures that adequate protections are in place through one of the following mechanisms:

• Data processing agreements with standard recognised data protection clauses.
• Confirmation that the recipient country maintains an adequate level of data protection.
• Additional technical and organisational measures such as end-to-end encryption.

12Children's Privacy

The Reze88 platform is strictly for individuals aged 18 and above. We do not knowingly collect, process, or store personal data from anyone under the age of 18. If we discover that a minor's personal data has been collected without our knowledge, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian who suspects that your child who is a minor has registered an account on Reze88, please contact us immediately at support@reze88.biz. We will investigate and take appropriate action promptly.

13Changes to the Privacy Policy

Reze88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, evolving legal requirements, or new features introduced to the platform. Any material changes to how we process your personal data will be communicated to you at least 14 days before they take effect, via:

• Email to the email address registered with your Reze88 account.
• In-platform notifications on Reze88 when you log in.
• An updated "Last Updated" date at the top of this Privacy Policy page.

Continued use of the Reze88 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you have the right to close your Reze88 account before they take effect.

14Contact Us for Privacy Enquiries

If you have any questions, concerns, or complaints about how Reze88 handles your personal data, or if you wish to exercise any of the rights set out in Section 10, please contact our team through the following channels:

• Privacy Email: support@reze88.biz – please state "Privacy Enquiry" in the subject line for faster processing.
• Live Chat: Available 24/7 directly from the Reze88 platform after logging in to your account.
• FAQ: Visit FAQ page for answers to common questions.

Reze88 will endeavour to respond to all privacy enquiries within 30 calendar days. For complex requests or those requiring more detailed identity verification, the response period may be longer, and we will notify you of the expected timeframe.