Reza88 Privacy Policy
This Privacy Policy explains how Reza88 collects, processes, stores, and protects the personal data of players and visitors using our platform. We take your privacy seriously and are committed to handling your information with transparency and care.
How We Protect Your Privacy
Encrypted Data Storage
All personal data held by Reza88 is encrypted at rest using industry-standard AES-256 encryption. Data in transit is protected by TLS 1.3 across all connections.
No Third-Party Data Sales
Reza88 does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data is yours and we treat it accordingly.
You Control Your Data
Players can request access to, correction of, or deletion of their personal data at any time by contacting our support team. We respond within 30 days of a verified request.
Minimal Data Collection
We collect only the data that is strictly necessary to operate your account, process transactions, fulfil KYC obligations, and improve your experience on Reza88.
Strict Access Controls
Internal access to personal data is restricted on a need-to-know basis. Our staff receive regular data protection training, and access logs are audited routinely.
Prompt Breach Notification
In the unlikely event of a data breach that affects your personal information, Reza88 will notify affected players promptly and take immediate remedial action.
Introduction
This Privacy Policy ("Policy") sets out the basis on which Reza88 ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal data provided by or generated by users ("Player", "User", "you") of the Reza88 website at reza88.cam and all associated platform services including online casino games, sports betting, live dealer products, account management tools, and promotional communications.
By accessing or using the Reza88 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.
🔒 Reza88 is committed to protecting your personal data. We process your information only for legitimate purposes, retain it for no longer than necessary, and apply robust technical and organisational safeguards at every stage of the data lifecycle.
This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and Reza88, and our Responsible Gambling policy, which explains how we may process your data in connection with player welfare obligations.
Definitions
The following definitions apply throughout this Policy:
- "Personal Data" means any information that identifies or could reasonably be used to identify you as an individual, either alone or in combination with other data.
- "Processing" means any operation performed on personal data, including collection, recording, storage, modification, retrieval, use, disclosure, transmission, erasure, or destruction.
- "Data Controller" means Reza88, which determines the purposes and means of processing your personal data.
- "Third Party" means any natural or legal person, public authority, agency, or body other than you and Reza88.
- "Cookies" means small text files placed on your device by the Platform to enable functional, analytical, or marketing-related features.
- "KYC" means Know Your Customer verification procedures undertaken to confirm identity, age, and eligibility in compliance with applicable anti-money laundering and fraud prevention requirements.
Categories of Personal Data We Collect
Reza88 collects personal data across several categories depending on your interaction with the Platform. The table below summarises the main categories, examples, and the purpose for which each category is collected.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, MyKad / passport number, nationality | Account registration, KYC verification, age confirmation (21+) |
| Contact Data | Email address, Malaysian mobile number, residential address (including city — Kuala Lumpur, Penang, Johor Bahru, etc.) | Account communication, support, identity verification |
| Financial Data | Bank account number, e-wallet ID (Touch 'n Go, Boost, GrabPay), transaction history in MYR | Deposit and withdrawal processing, AML compliance |
| Technical Data | IP address, device type, browser, operating system, session duration, clickstream data | Platform security, fraud prevention, performance optimisation |
| Usage Data | Games played, bets placed, win/loss history, bonus redemptions, login timestamps | Account management, responsible gambling monitoring, personalisation |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Customer service delivery, dispute resolution, quality assurance |
| Verification Documents | Copies of MyKad, passport, utility bills, bank statements | KYC and AML compliance, withdrawal authorisation |
How We Collect Your Data
Reza88 collects personal data through the following means:
- Direct collection: When you register an account, complete KYC verification, submit a support request, respond to a survey, or participate in a promotion, you provide personal data directly to us.
- Automated collection: When you browse or interact with the Platform, our systems automatically collect technical and usage data via cookies, server logs, and similar tracking technologies.
- Third-party sources: We may receive identity verification data from KYC and fraud-prevention service providers, and transaction data from payment processors including Maybank, CIMB, Public Bank, Hong Leong, FPX, DuitNow, and supported e-wallet platforms.
- Publicly available sources: In limited circumstances, we may supplement your profile with information from publicly available registers where required for compliance purposes.
Legal Basis for Data Processing
Reza88 processes your personal data only where a lawful basis exists to do so. The applicable legal bases for our processing activities are as follows:
- Contractual necessity: Processing required to create and manage your account, process deposits and withdrawals in MYR, settle wagers, and deliver the services you have requested under our Terms & Conditions.
- Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, age verification requirements, and any mandatory reporting obligations.
- Legitimate interests: Processing that serves Reza88's legitimate business interests, including fraud detection, platform security, responsible gambling monitoring, and internal analytics — provided these interests are not overridden by your rights.
- Consent: Where you have provided explicit consent, for example to receive promotional communications about new games, bonus offers, or events. You may withdraw consent at any time by contacting our support team.
How We Use Your Personal Data
Reza88 uses the personal data we collect for the following specific purposes:
- To create, verify, and manage your account on the Platform;
- To process deposits and withdrawals via your selected MYR payment method (DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, Touch 'n Go eWallet, Boost, GrabPay, Visa, Mastercard, BTC, USDT);
- To carry out age verification and KYC checks to confirm eligibility (players must be 21 or above);
- To monitor gameplay and transaction data for responsible gambling purposes, including flagging indicators of problem gambling behaviour;
- To detect, investigate, and prevent fraud, collusion, multi-accounting, and other prohibited activities;
- To comply with AML obligations and, where required by law, to report suspicious transactions to relevant authorities;
- To provide customer support and resolve disputes in a timely and fair manner;
- To communicate service updates, security notices, and changes to our Terms or Policy;
- To send you promotional communications about bonuses, games, or events — only where you have consented or where we have a legitimate interest that is not overridden by your rights;
- To analyse aggregated, anonymised usage data to improve Platform performance and user experience.
Data Sharing & Disclosure
Reza88 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate data protection safeguards:
- Payment processors and financial institutions: Including Maybank, CIMB, Public Bank, Hong Leong Bank, FPX, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, and cryptocurrency infrastructure providers, for the purpose of processing your transactions.
- KYC and identity verification providers: Third-party services engaged to verify identity documents and screen for sanctions or fraud indicators.
- Technology and hosting providers: Cloud infrastructure and software vendors who process data on our behalf under binding data processing agreements.
- Game providers: Licensed game studios whose products are available on the Reza88 Platform, who may receive anonymised session data for fair-play and technical support purposes.
- Regulatory and law enforcement authorities: Where we are legally required to disclose data pursuant to a court order, regulatory directive, or applicable law.
All third parties who process personal data on behalf of Reza88 are bound by contractual data protection obligations and are prohibited from using your data for any purpose beyond those specified by us.
Cookies & Tracking Technologies
Reza88 uses cookies and similar tracking technologies to enable essential Platform functions, analyse user behaviour, and improve the overall experience. The categories of cookies we use are as follows:
- Essential cookies: Required for the Platform to function correctly, including maintaining your login session, remembering your currency preference (MYR), and enabling the live chat feature. These cannot be disabled without impairing core Platform functionality.
- Performance and analytics cookies: Used to collect anonymised data about how visitors interact with the Platform, including pages visited, session duration, and error events. This data helps us identify and fix technical issues.
- Functional cookies: Remember your preferences such as language settings, game category filters, and display options to personalise your experience on return visits.
- Security cookies: Assist in fraud detection, bot identification, and the integrity of login and transaction processes.
You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may limit your access to specific features of the Platform. Continued use of Reza88 following the display of our cookie notice constitutes acceptance of our use of cookies as described in this section.
Data Retention
Reza88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and in any event for no longer than is required or permitted by applicable law.
The following general retention periods apply:
- Active account data: Retained for the duration of your account relationship with Reza88.
- Transaction and financial records: Retained for a minimum of seven (7) years following the transaction date, in line with standard AML and financial record-keeping requirements.
- KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later.
- Customer support communications: Retained for three (3) years from the date of the relevant interaction.
- Technical and usage logs: Retained for a rolling period of up to twenty-four (24) months for performance monitoring and fraud investigation purposes.
Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Anonymised data that cannot be used to identify you may be retained indefinitely for aggregated analytical purposes.
Data Security
Reza88 implements a comprehensive set of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- AES-256 encryption for all personal data stored on our servers;
- TLS 1.3 encryption for all data transmitted between your device and our Platform;
- Two-factor authentication (2FA) options for all player accounts;
- Role-based access controls limiting internal data access to authorised personnel only;
- Regular third-party penetration testing and vulnerability assessments;
- Automated intrusion detection and real-time monitoring of system events;
- Employee data protection awareness training conducted at regular intervals.
While Reza88 takes every reasonable precaution to protect your data, no digital platform can guarantee absolute security. You also play a role in keeping your account secure: use a strong, unique password, enable 2FA, and do not share your login credentials with any other person.
Your Rights as a Data Subject
Subject to applicable law and certain exceptions, you have the following rights in relation to the personal data Reza88 holds about you. To exercise any of these rights, contact our support team with a written request. We will respond within 30 calendar days of receiving a verified request.
Right of Access
Request a copy of the personal data we hold about you, along with information about how it is processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restrict Processing
Request that we limit our processing of your data in certain circumstances, for example while a dispute over its accuracy is being resolved.
Right to Data Portability
Request a copy of your personal data in a structured, machine-readable format where processing is carried out by automated means.
Right to Object
Object to processing based on our legitimate interests, including the use of your data for direct marketing purposes.
Children's Privacy
The Reza88 Platform is strictly intended for individuals aged 21 years or above. We do not knowingly collect, process, or retain personal data from any individual below the age of 21. If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account.
If you believe that a minor under the age of 21 has registered an account or provided personal data to Reza88, please contact our support team immediately so that we can investigate and take appropriate action.
Parents and guardians are encouraged to use available parental control tools to prevent minors from accessing online gambling platforms. Our Responsible Gambling page contains further guidance on protecting vulnerable individuals.
Cross-Border Data Transfers
Reza88 operates with the support of technology partners, game providers, and payment processors whose infrastructure may be located in jurisdictions outside Malaysia. In such cases, your personal data may be transferred to and processed in those jurisdictions.
Where we transfer personal data internationally, we ensure that appropriate safeguards are in place to maintain a standard of data protection equivalent to that described in this Policy. Safeguards may include:
- Contractual data processing agreements incorporating standard data protection clauses;
- Transfers only to jurisdictions with an adequate level of data protection as recognised by applicable standards;
- Technical controls ensuring data is encrypted during transit.
Amendments to This Policy
Reza88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. Material changes will be communicated to players via a notification on the Platform or by email to the address associated with your Account.
The date of the most recent revision is displayed at the top of this Policy. We encourage you to review this page periodically. Continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way Reza88 processes your personal data, please contact us through the following channels. We are committed to responding to all data-related enquiries promptly and fairly.
Data & Privacy Enquiries: [email protected]
Live Chat: Available 24 hours a day, 7 days a week — including Malaysian public holidays.
Response Commitment: We aim to acknowledge all privacy-related requests within 5 business days and to provide a substantive response within 30 calendar days of a verified request.
For questions relating to your account terms, bonuses, or wagering, please refer to our Terms & Conditions or our FAQ page.
Play Securely on Reza88
Your personal data is protected at every step — from registration to withdrawal. If you have any questions about how we handle your information, our support team is available around the clock. Reza88 — for players aged 21 and above.
PLAY RESPONSIBLY · 21+ ONLY · KNOW YOUR LIMITS