rzp88 Privacy Policy

1.Introduction

1.1 This Privacy Policy ("Policy") applies to all personal data processed by rzp88 ("rzp88", "we", "us", "our") in connection with the operation of the rzp88 online casino and sportsbook platform accessible at rzp88.org and all associated subdomains and mobile-optimised pages (collectively, the "Platform").

1.2 rzp88 takes its data protection obligations seriously. We recognise that trust is fundamental to the relationship between rzp88 and its members — particularly Malaysian players who share personal and financial information with us in order to use the Platform. This Policy is intended to give you full visibility into how that information is handled.

1.3 By registering an account on the rzp88 Platform or by continuing to use the Platform following any update to this Policy, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not use the rzp88 Platform.

1.4 This Policy should be read alongside rzp88's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the agreement between you and rzp88.

2.Data Controller

2.1 For the purposes of this Policy, rzp88 acts as the data controller in respect of personal data collected and processed through the rzp88 Platform. As data controller, rzp88 determines the purposes and means by which your personal data is processed.

2.2 rzp88 processes personal data in accordance with applicable data protection legislation and in compliance with the data protection provisions of the international gaming authority framework under which it operates. Where data processing is carried out by third-party service providers engaged by rzp88, those providers act as data processors operating on rzp88's instructions and are bound by appropriate contractual data protection obligations.

3.Data We Collect

3.1 rzp88 collects and processes the following categories of personal data:

Registration & Identity Data:

• Full name as it appears on your government-issued identification;
• Date of birth (used for age verification — 21+ requirement strictly enforced);
• Malaysian mobile number in +60 format;
• Username chosen at registration;
• Malaysian MyKad number or passport number (collected during identity verification);
• Residential address (collected at the point of withdrawal verification or as required for AML compliance).

Financial & Transaction Data:

• Deposit and withdrawal transaction records, including amounts, dates, and payment methods used (Touch n Go eWallet, Boost, Maybank FPX, CIMB, Public Bank, Visa/Mastercard, USDT);
• Partial payment instrument identifiers (e.g., last four digits of a linked card or masked eWallet account number);
• MYR wallet balance history and bonus redemption records.

Gaming & Behavioural Data:

• Game session logs, including games played, stakes, outcomes, and timestamps;
• Sportsbook bet history, including markets, odds, and settlement outcomes;
• Responsible gaming tool usage, including deposit limits, self-exclusion activations, and session reminders;
• Customer support interaction records.

Technical & Device Data:

• IP address and approximate geographic location at login;
• Device type, operating system, and browser type;
• Session duration, page navigation paths, and Platform feature usage;
• Login timestamps and device identifiers associated with account access events.

4.How We Collect Data

4.1 Directly From You. The majority of personal data rzp88 holds is provided directly by you during the account registration process, during identity verification, when you make deposits or submit withdrawal requests, or when you contact rzp88 support.

4.2 Automatically. rzp88 automatically collects technical and behavioural data as you use the Platform through server logs, cookies, and similar tracking technologies. This data is collected whether or not you are logged in to your account. See Section 7 for details on cookies.

4.3 From Third Parties. rzp88 may receive personal data about you from third-party sources including: payment processors and eWallet providers (for transaction verification); identity verification service providers (for KYC compliance); fraud detection and AML screening services; and, where legally required, government authorities or regulatory bodies.

5.Purpose & Legal Basis for Processing

5.1 rzp88 processes your personal data for the following purposes and on the following legal bases:

• Account Management & Service Delivery: Processing is necessary for the performance of the contract between you and rzp88 (the Terms & Conditions). This includes account creation, wallet management, game access, and payout processing.
• Identity & Age Verification: Processing is necessary to comply with rzp88's legal obligations under applicable gaming authority requirements, including verification that all users are aged 21 or above.
• Anti-Money Laundering & Fraud Prevention: Processing is required for compliance with AML and CTF obligations. rzp88 is legally required to monitor transactions and report suspicious activity to relevant authorities.
• Responsible Gaming Compliance: Processing is required for compliance with rzp88's responsible gaming obligations, including enforcement of self-exclusion, deposit limits, and loss limits set by members.
• Platform Security: Processing is carried out on the basis of rzp88's legitimate interest in protecting the Platform, its members, and the integrity of its games from fraud, abuse, and unauthorised access.
• Marketing Communications: Where you have provided separate consent, rzp88 may use your contact information to send you promotional messages about rzp88 products and offers. You may withdraw this consent at any time via your account notification settings.
• Analytics & Product Improvement: Aggregated and de-identified usage data is processed on the basis of rzp88's legitimate interest in improving Platform features and user experience.

6.Data Sharing & Disclosure

6.1 rzp88 does not sell your personal data to third parties for marketing purposes. We share personal data only in the following circumstances:

• Payment Processors: Transaction data is shared with payment processors and eWallet providers (including Touch n Go, Boost, and Malaysian bank FPX systems) as necessary to process your deposits and withdrawals. These providers are bound by their own privacy obligations and by contractual terms with rzp88.
• Identity Verification Providers: Where identity verification is required, rzp88 uses third-party KYC service providers who receive the minimum personal data necessary to complete the verification check.
• Game Technology Providers: Game providers (such as live dealer studio operators and RNG slot providers) may receive pseudonymised session data for the purpose of game operation, technical support, and certification compliance.
• Legal & Regulatory Authorities: rzp88 will disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where required by applicable law or by a valid legal order. rzp88 will not notify you of such disclosures where it is legally prohibited from doing so.
• Business Transfers: In the event of a merger, acquisition, or sale of rzp88's business or assets, personal data held by rzp88 may be transferred as part of that transaction. Affected members will be notified in advance where reasonably practicable.

6.2 All third parties with whom rzp88 shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond that for which it was shared.

7.Cookies & Tracking Technologies

7.1 rzp88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies (which keep you logged in), CSRF protection tokens, and load-balancing cookies. Essential cookies cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect aggregated data about how members navigate the Platform, which game categories are most visited, and where users encounter friction. This data is used in de-identified form to improve Platform design.
• Security Cookies: Used to detect and prevent fraudulent login attempts, account takeover activity, and bot traffic.
• Preference Cookies: Store your Platform settings, including display language preferences, responsible gaming tool configurations, and notification preferences.

7.2 You may manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect your ability to use some features of the rzp88 Platform. Essential cookies required for security and session management cannot be disabled.

7.3 rzp88 does not use third-party advertising cookies or cross-site tracking technologies that would allow external advertisers to build profiles of your browsing activity across unrelated websites.

8.Data Retention

8.1 rzp88 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation.

8.2 The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with AML record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, in compliance with applicable financial record-keeping requirements.
• Game session logs: Retained for a minimum of 3 years from the date of each session.
• Support interaction records: Retained for 3 years from the date of the interaction, or longer where the interaction relates to a live dispute or legal claim.
• Technical and device logs: Retained for 12 months from the date of collection, except where retained for a longer period in connection with a security investigation.

8.3 When data is no longer required to be retained, rzp88 securely deletes or anonymises it so that it can no longer be associated with any individual member.

9.Data Security

9.1 rzp88 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all Platform pages and API communications;
• Encryption of sensitive data fields (including payment instrument data and identity document numbers) at rest in the rzp88 database;
• Role-based access controls limiting internal staff access to personal data to those with a business need;
• Multi-factor authentication required for all internal systems that hold or process member personal data;
• Regular security assessments and penetration testing of the rzp88 Platform infrastructure;
• Automatic account lockout and anomaly detection for login events — with immediate SMS notification to the registered Malaysian mobile number upon detection of unusual access patterns.

9.2 Notwithstanding these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. rzp88 cannot guarantee absolute security and accepts no liability for any unauthorised access or breach that occurs despite the security measures described in this section.

9.3 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, rzp88 will notify affected members without undue delay and will take immediate remedial action.

10.Your Data Rights

10.1 Subject to applicable law and rzp88's legal obligations, you have the following rights in relation to your personal data held by rzp88:

• Right of Access: You have the right to request a copy of the personal data rzp88 holds about you. rzp88 will respond to access requests within 30 days.
• Right to Rectification: You have the right to have inaccurate personal data corrected. Most profile data can be updated directly through your rzp88 account settings. Where verification is required before a change can be made (for example, a change of registered mobile number), rzp88 will complete the process within 24 hours of verification.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to rzp88's legal obligations to retain certain data (see Section 8). Requests for erasure will be assessed and responded to within 30 days.
• Right to Restriction: You have the right to request that rzp88 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where processing is unlawful but you prefer restriction to erasure.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, machine-readable format and to have it transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on rzp88's legitimate interests. rzp88 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time via your account notification settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10.2 To exercise any of the rights listed above, please contact rzp88 at [email protected] with the subject line "Data Rights Request — [Your Username]". rzp88 may require verification of your identity before processing a data rights request.

11.Children & Minors

11.1 The rzp88 Platform is strictly for users aged 21 and above. rzp88 does not knowingly collect personal data from individuals under the age of 21. Age verification is carried out as part of the rzp88 registration and withdrawal process.

11.2 If rzp88 becomes aware that personal data has been collected from a person under the age of 21, that account will be closed immediately, the data will be deleted (subject to any AML record-keeping obligations), and any deposited funds will be returned to their source. If you believe a minor has registered on the rzp88 Platform, please notify rzp88 at [email protected] immediately.

12.Third-Party Links

12.1 The rzp88 Platform may contain references or links to third-party websites, game providers, or payment service provider interfaces. rzp88 is not responsible for the privacy practices of any third-party website or service. This Policy applies solely to data processed by rzp88 through the rzp88 Platform. You should review the privacy policies of any third-party services you access in connection with your use of rzp88.

13.Policy Updates

13.1 rzp88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be notified to registered members via the Platform notification system and/or by SMS to the registered mobile number at least 7 days before the change takes effect.

13.2 The current version of this Policy is always published at rzp88.org/privacy-policy. The "Last Updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the Platform following the effective date of any update constitutes acceptance of the revised Policy.

14.Contact & Complaints

14.1 If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to make a complaint about rzp88's data processing practices, please contact the rzp88 data protection team:

• Platform: rzp88.org
• Email: [email protected]
• Subject Line for Privacy Matters: "Privacy Enquiry — [Your Username]"
• Live Chat: Available 24/7 within the rzp88 Platform
• Response Timeframe: rzp88 aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.

14.2 If you are not satisfied with rzp88's response to a privacy complaint, you may escalate the matter to the relevant data protection authority or the regulatory body responsible for oversight of rzp88's gaming operations under its international gaming authority licensing framework.