Reze888 Privacy Policy — Personal Data Protection for Malaysia Members

This reze888 Privacy Policy provides a comprehensive overview of our information handling practices. It covers all personal data collected through the reze888 platform, whether via the website, mobile app, email communications, customer support, or any other channel associated with reze888 services.

As a platform serving users in Malaysia, reze888 handles your personal data responsibly. We ensure that every piece of data collected has a clearly defined purpose, is used only for that stated purpose, and is protected by security measures appropriate to the sensitivity of that data.

This Privacy Policy should be read together with Terms & Conditions reze888, which forms part of your overall agreement with our platform. In the event of any conflict between these documents regarding data privacy, this Privacy Policy shall prevail.

Reze888 collects various types of information depending on how you interact with the platform. Below are the categories of data we collect and the purposes for which they are collected:

Reze888 does not collect data unnecessarily. Our "data minimisation" principle ensures we only request information that is genuinely required to provide you with a safe and effective service as a member.

The personal data we collect is used solely for legitimate, stated purposes. reze888 does not use your data for purposes you would not reasonably expect or for which you have not given consent:

• Account management: Creating, verifying, and maintaining your reze888 account, including the KYC process and age verification.
• Transaction processing: Securely process deposits and withdrawals in Malaysian Ringgit (RM) via Touch 'n Go eWallet, GrabPay, DuitNow, Boost, ShopeePay, and FPX.
• Service delivery: Grants access to all reze888 games including slots, baccarat, poker, e-sports, and Virtual Sports according to your preferences.
• Service communications: Sending account-related notifications, transaction confirmations, service updates, and responses to your support enquiries.
• Security and fraud prevention: Monitoring account activity to detect and prevent fraud, money laundering, or misuse of the reze888 platform.
• Legal compliance: Meeting applicable legal obligations, including financial reporting requirements and compliance with directives from relevant authorities.
• Platform improvements: Analysing usage patterns in aggregate (not at an individual level) to improve the design, speed, and overall user experience of the reze888 platform.
• Marketing communications: Sending you relevant reze888 promotional information and offers — only if you have provided consent to receive such communications, and you may unsubscribe at any time.

Every use of your data has a valid legal basis — whether for the fulfilment of a contract, a legal obligation, reze888's legitimate interests, or based on explicit consent you have provided.

Reze888 does not sell your personal data. We only share your information in the limited and controlled circumstances set out below. All data sharing is governed by strict confidentiality agreements:

• Payment providers: To process your deposits and withdrawals, the necessary transaction information is shared with payment service providers such as Touch 'n Go, GrabPay, DuitNow, and FPX processors. Only the minimum data required to complete the transaction is shared.
• Technology service providers: reze888 uses third-party providers for services such as server hosting, platform analytics, and technical support. These providers have access to data only to the extent necessary to perform their functions and are subject to strict data protection agreements.
• Legal authorities: reze888 will disclose the required information to the relevant authorities if compelled to do so by law, court order, or in the course of fraud investigations and illegal activity.
• Audit and compliance: Independent auditors conducting security or compliance assessments of reze888 may have limited access to certain data under binding confidentiality agreements.

In all of the data sharing scenarios above, reze888 ensures that only the minimum necessary data is shared, and all recipients are bound to handle it to the same strict privacy standards we uphold.

Reze888 takes security infrastructure seriously to ensure your personal and financial data is always protected. Below are the key security measures we have in place:

• Data encryption in transit: All communication between your browser and reze888's servers is encrypted using 256-bit TLS/SSL protocol. This means no one can read your data while it is being transmitted over the internet.
• Encryption of data at rest: Sensitive data stored in reze888's databases, including passwords, is hashed using robust algorithms. Your password is never stored in plain text and cannot be viewed by anyone, including reze888 staff.
• Internal access controls: A role-based access control (RBAC) system ensures that reze888 staff can only access data required for their specific duties. All access to member data is logged and monitored.
• Regular security audits: reze888 conducts regular security assessments, including penetration testing by independent third parties, to identify and address vulnerabilities before they can be exploited.
• 24/7 threat monitoring: Automated monitoring systems operate around the clock to detect and respond to any suspicious activity or unauthorised access attempts on reze888's servers.
• Incident response plan: reze888 has established incident response procedures to address any data breach swiftly and effectively, including a notification process for affected members.

While we take all reasonable steps to protect your data, no system is 100% impenetrable. You also play an important role in keeping your account secure by using a strong password and not sharing it with anyone.

Reze888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit the reze888 website. The following are the types of cookies we use:

• Essential cookies (required): These cookies are required for the core functionality of the reze888 platform, such as maintaining your login session, keeping your account secure, and ensuring your requests reach the correct server. They cannot be disabled without affecting platform functionality.
• Performance cookies: These cookies collect information about how you use the reze888 platform — which pages you visit, how long you spend on them, and any errors that occur. This information is used in aggregate to improve platform performance.
• Functional cookies: These cookies allow reze888 to remember your preferences — such as your chosen language, display settings, and favourite game selections — to deliver a more personalised experience on your next visit.
• Analytics cookies: We use analytics tools to understand overall platform usage patterns. This data helps reze888 make better-informed decisions about new feature development and platform improvements.

You can manage cookies through your web browser settings. Most browsers allow you to view, manage, and delete stored cookies. However, disabling certain cookies may affect the functionality or your overall experience on the reze888 platform.

Reze888 retains your personal data only for as long as necessary to fulfil the purpose of collection and to comply with relevant legal obligations. Our "minimum retention" principle means we do not keep data longer than required.

Reze888's data retention guidelines are as follows:

• Active account data: Retained for the duration your reze888 account remains active, and for a reasonable period after account closure for audit and compliance purposes.
• Financial transaction records: Retained for a minimum of 5 years after the transaction date, in line with financial compliance practices and applicable legal requirements.
• Support communication records: Records of interactions between you and the reze888 support team are retained for 2 years for reference and service improvement purposes.
• Analytics data: De-identified analytics data (which cannot be linked to any specific individual) may be retained for longer periods for platform research and development purposes.
• Data following a deletion request: When you request account deletion, we will process the request within 30 business days. However, certain data may need to be retained to fulfil legal obligations even after the account has been deleted.

Once the retention period expires or data is no longer needed, reze888 will securely delete or anonymise it using methods that ensure it cannot be recovered or reused.

As a reze888 member, you have certain rights regarding the personal data we hold about you. reze888 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact the reze888 team at support@reze888.xyz specifying the right you wish to exercise and the required verification details. We will respond within 30 business days of receiving your complete request.

The reze888 platform is intended for individuals aged 18 years of age and above only. reze888 does not knowingly collect, process, or store any personal data from individuals under the age of 18.

The reze888 registration process requires age verification, and we take reasonable steps to prevent registration by individuals below the minimum age. This includes Malaysian phone number verification at registration and a KYC process that may require age-verification documents.

If reze888 becomes aware that we have collected personal data from an individual under the age of 18 without valid consent, we will take immediate steps to delete that data and close the account in question. If you believe a minor has registered a reze888 account, please contact us at support@reze888.xyz immediately.

Reze888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data handling practices, new legal requirements, or improvements to the way we protect member privacy.

When material changes are made to this Privacy Policy, reze888 will notify members through the following means:

• In-platform notifications on reze888 when you log in
• Notification email to your registered email address
• Updates the "Last Updated" date at the top of this document

Continued use of the reze888 platform after an amended Privacy Policy takes effect constitutes your acceptance of the revised policy. If you do not agree with the changes made, you have the right to close your account and stop using the reze888 platform.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data at reze888, please reach out to our team:

• Email: support@reze888.xyz
• Live Chat: Available directly on the reze888 platform, 24 hours a day, 7 days a week
• Language of service: Malay and English