Reze888 Privacy Policy – Data Protection for Malaysian Users

Reze888 is the data controller for all personal information collected through our platform. This means we are responsible for deciding how and why your personal data is collected, used, and protected — not any third party.

This Privacy Policy applies to:

• All users visiting the reze888.click website, whether as guests or registered members
• All reze888 mobile app users on Android and iOS
• All individuals who communicate with reze888 via live chat, email, WhatsApp, or any other channel
• All individuals participating in reze888 promotions, contests, or VIP programmes

This Privacy Policy forms part of your agreement with reze888 and should be read together with Terms & Conditions us. By registering a reze888 account or continuing to use our platform, you acknowledge that you have read, understood and agreed to this Privacy Policy.

Reze888 collects only the personal data strictly necessary to provide our services to you. We do not collect excessive or irrelevant information beyond what is needed to operate the platform. Below are the categories of data we collect and the purposes for each:

Reze888 collects this data through several means: directly from you during registration and use of the platform, automatically via tracking technologies such as cookies and server logs, and occasionally from legitimate third parties such as payment providers (Touch 'n Go, GrabPay, DuitNow, FPX, and others) for transaction verification purposes.

Reze888 uses your personal data solely for lawful purposes to which you have given explicit or implied consent through your use of our platform. The primary uses of your data are as follows:

• Account Management: To create, manage, and maintain your reze888 account — including identity verification, password recovery, and account information updates.
• Financial Transaction Processing: To process deposits via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, and bank transfers, as well as to process withdrawals of your winnings to the same payment methods.
• Service Provision: To provide access to all reze888 games and services — including live casino, football, e-sports, lottery, baccarat and virtual sports — tailored to your preferences and history.
• Security & Fraud Detection: To monitor account activity for detecting any unauthorised access attempts, identity fraud, money laundering, or bonus abuse.
• Legal Compliance: To fulfil legal obligations under PDPA 2010, anti-money laundering legislation, and directives from reze888's licensing regulatory bodies.
• Service Communications: To send important account-related notifications such as deposit confirmations, withdrawal status updates, password changes, and security alerts.
• Marketing (With Consent): To send information about relevant reze888 promotions, bonuses and offers — only if you have given consent to receive marketing communications during registration or through your account settings.
• Platform Improvement: Aggregated usage data (not personally identifiable data) is used to understand platform usage patterns in order to improve the overall performance, interface, and user experience of reze888.

Reze888 does not sell, rent, or trade users' personal data to any third party for their own commercial purposes. Full stop. This is our absolute commitment to all Malaysian members.

There are, however, limited circumstances in which reze888 needs to share data with certain parties, all within the scope of legitimate operational requirements:

• Payment Providers: Transaction information required to process your deposits and withdrawals is shared with payment processors including Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, FPX, and FPX member banks. This sharing is kept to the minimum necessary.
• Game Providers: Game session information required to enable gameplay is shared with the casino and virtual sports software providers that partner with reze888. These providers are bound by strict confidentiality agreements.
• IT Service Providers: Server hosting providers, cybersecurity services, and analytics partners that assist reze888 in operating the platform may have limited access to certain data. All such providers are bound by strict data protection agreements.
• Legal Authorities: reze888 will disclose user data to Malaysian authorities (such as PDRM or regulatory financial institutions) when required by a valid court order, anti-money laundering legislation, or a directive from a competent regulator.
• Business Transfer: In the event of a merger, acquisition, or sale of reze888 assets, user data may be transferred to the new entity — provided that entity upholds data protection standards equal to or stricter than those currently practised by reze888. Users will be notified in advance.

In all sharing scenarios described above, reze888 shares only the minimum data strictly necessary (data minimisation principle) and always ensures that recipients are bound by adequate confidentiality obligations.

Reze888 makes serious investments in security technology and procedures to ensure your personal data is consistently protected against unauthorized access, loss, destruction, or disclosure. The following are the key security measures we have in place:

• Data Encryption in Transit: All data transmitted between your device and reze888's servers is encrypted using TLS 1.3 protocol with 256-bit SSL encryption — ensuring that no third party can intercept your communications with our platform.
• Data at Rest Encryption: All sensitive personal data stored in reze888's databases — including financial information and KYC documents — is encrypted using AES-256 standard. This means that even in the unlikely event of unauthorised database access, any extracted data would remain unreadable.
• Tiered Access Controls: Internal access to user data is governed by a "need-to-know" principle — only staff who genuinely require access to specific data to carry out their job functions are permitted, and all access is automatically logged for audit purposes.
• Two-Factor Authentication (2FA): All reze888 internal systems containing sensitive user data require two-factor authentication for access. reze888 also encourages all members to enable 2FA on their own accounts.
• 24/7 Security Monitoring: reze888's cybersecurity team monitors the platform continuously, 24 hours a day, using advanced intrusion detection systems (IDS) and intrusion prevention systems (IPS).
• Regular Security Testing: reze888 undergoes penetration testing and security audits conducted by independent third parties on a regular basis to identify and remediate vulnerabilities before they can be exploited.

Reze888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device by your web browser when you visit the reze888 website.

Types of cookies used by reze888:

• Essential Cookies (Session): Required for the platform's core functions — such as keeping you logged in, saving items in your betting slip, and maintaining session security. These cookies cannot be disabled as the platform will not function without them.
• Preference Cookies: Saves your preferences such as language, time zone, and display settings. Allows the reze888 platform to remember your choices between sessions.
• Analytics Cookies: Used to understand how users interact with the reze888 platform — which pages are visited most frequently, how long users spend in each section, and what causes users to leave. This data is used in aggregate form to improve the overall user experience.
• Security Cookies: Helps reze888 identify and prevent fraudulent activity by tracking unusual login patterns or suspicious access attempts.

You can manage or disable cookies through your browser settings. However, disabling essential cookies may affect the functionality of the reze888 platform and your gaming experience. For the best security when visiting reze888, we recommend using an up-to-date browser and keeping essential cookies enabled.

Reze888 retains your personal data only for as long as necessary for the original purpose of collection, or as required by Malaysian law. We do not keep data longer than needed.

• Active Account Data: For as long as your reze888 account remains active and you continue to use our services.
• Data Following Account Closure: Following account closure, reze888 will retain data required for legal compliance purposes (such as financial records) for 7 years in accordance with Malaysian legal requirements, after which that data will be securely deleted or anonymised.
• Financial Transaction Records: All deposit and withdrawal records are retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
• Security Logs: Security activity logs and login attempt records are retained for 90 days for the purpose of security incident investigations.
• Support Communication Records: Conversations with the reze888 customer support team are retained for 2 years for training, quality control, and dispute resolution purposes.
• Marketing Data: If you have withdrawn consent to receive marketing communications, your preference is retained for 3 years to ensure we do not accidentally send you unwanted communications.

When the retention period expires or you request deletion of your data (and there are no legal grounds preventing this), reze888 will securely delete or anonymise your data so that it can no longer be linked to your identity.

As a reze888 user in Malaysia, you have important rights over your personal data under the Personal Data Protection Act 2010 (PDPA). reze888 is committed to making it easy for you to exercise these rights.

Reze888 strictly prohibits registration and use of the platform by individuals under the age of 18. Our platform is not directed at children, and we do not knowingly collect personal data from minors.

Measures reze888 takes to prevent underage access to the platform include:

• Age verification requirement during the registration process
• KYC checks that can verify age when withdrawals exceed a certain limit
• Detection system for indicators that an account may be held by an underage individual

If reze888 discovers that we have collected personal data from an individual under the age of 18 without prior knowledge, we will take immediate action to delete that data and close the account in question. If you become aware that a minor has registered a reze888 account, please contact us immediately at support@reze888.click.

Reze888 may update this Privacy Policy from time to time to reflect changes in our practices, new legal requirements, or new platform features. We are committed to notifying you of any significant changes.

How we notify you of changes to the reze888 Privacy Policy:

• Email notification to the registered address on your account for significant changes
• In-platform pop-up notifications on reze888 when you log in for the first time after a change
• Update the "Last Updated" date at the top of this document
• An announcement on the reze888 main website for at least 30 days following the change

For significant changes affecting how your data is used or shared, reze888 will provide at least 30 days' notice before the changes take effect and will request your renewed consent where required. Continued use of the reze888 platform after the notice period is considered acceptance of the updated Privacy Policy.

If you have any questions, concerns, or complaints regarding how reze888 handles your personal data, or if you wish to exercise any of your rights under PDPA 2010, our privacy team is ready to assist through the following channels:

• Dedicated Privacy Email: support@reze888.click — for all privacy and data protection enquiries and requests. Please include "Privacy Enquiry" or "PDPA Request" in your email subject line for faster processing.
• Live Chat: Available 24/7 directly within the reze888 platform for general privacy enquiries. Our team will direct you to the appropriate channel for requests that require identity verification.
• Data Protection Officer: reze888 has an appointed Data Protection Officer (DPO) responsible for ensuring compliance with PDPA 2010. Formal requests under PDPA should be submitted via the email address above.

Reze888 will acknowledge receipt of all privacy enquiries within 3 business days. Rights requests under PDPA will be resolved within 14 business days from the date your identity is successfully verified. For complex requests, we will notify you if additional time is required.

If you are not satisfied with reze888's response to your privacy enquiry after going through our internal complaints process, you have the right to file a complaint with the Department of Personal Data Protection (JPDP) Malaysia — the government body responsible for overseeing PDPA compliance in Malaysia.