rzp88 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

rzp88 ("rzp88", "we", "us", "our") operates the online gaming platform available at rzp88.app, offering casino games, sportsbook, lottery, live dealer, slots, and related services to players in Malaysia and other permitted jurisdictions. This Privacy Policy applies to all personal data collected through the rzp88 platform, including data collected when you visit rzp88.app without registering, when you create and manage an rzp88 account, when you make deposits or withdrawals, when you contact rzp88 customer support, and when you interact with rzp88 promotional communications.

rzp88 is committed to handling your personal data lawfully, transparently, and in accordance with applicable data protection principles. We collect only the data we genuinely need, retain it only for as long as necessary, and implement appropriate security measures to protect it throughout its lifecycle.

2. Data Controller

For the purposes of this Privacy Policy, rzp88 acts as the data controller in respect of personal data collected through the rzp88 platform. This means rzp88 determines the purposes for which your personal data is processed and the means by which that processing is carried out.

If you have any questions regarding how rzp88 processes your personal data, or wish to exercise any of the rights described in Section 10, please contact rzp88 using the contact information in Section 15 of this policy.

3. Personal Data We Collect

rzp88 collects personal data in the following categories:

3.1 Registration and Identity Data

When you create an rzp88 account, we collect: your full legal name; date of birth; email address; phone number; residential address; username; and password (stored in hashed form — rzp88 does not store plaintext passwords).

3.2 Identity Verification (KYC) Data

As required by rzp88's international gaming licence, we may collect government-issued identification documents (such as a Malaysian identity card or passport), proof of address documents (such as a utility bill or bank statement), and proof of payment method ownership. This data is used solely for identity verification and anti-money laundering compliance purposes.

3.3 Financial and Transaction Data

We collect records of all deposits, withdrawals, bets, and winnings associated with your rzp88 account. We also collect payment method identifiers (such as e-wallet account IDs or masked bank account numbers) necessary to process financial transactions. rzp88 does not store full payment card numbers.

3.4 Usage and Behavioural Data

We collect data about how you interact with the rzp88 platform, including: pages visited; games played; bet amounts and outcomes; session duration; device type and operating system; browser type and version; and IP address and approximate geolocation.

3.5 Communications Data

We retain records of communications between you and rzp88, including live chat transcripts, support emails, and any information you provide when submitting a query or complaint.

3.6 Data Collected Automatically

When you access rzp88.app, certain technical data is collected automatically via cookies and similar technologies, as described in Section 7.

4. How rzp88 Uses Your Personal Data

5. Legal Basis for Processing

rzp88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide you with the rzp88 platform and services under the rzp88 Terms & Conditions, including account management, transaction processing, and game provision.
• Legal obligation: Processing required to comply with rzp88's obligations under its international gaming licence, anti-money laundering regulations, and other applicable legal requirements — principally identity verification and transaction record-keeping.
• Legitimate interests: Processing carried out for rzp88's legitimate business interests, including fraud prevention, platform security, and analytics, provided these interests are not overridden by your data protection rights.
• Consent: Processing carried out on the basis of your explicit consent, principally in respect of marketing communications. You may withdraw consent at any time as described in Section 11.

6. Data Sharing and Disclosure

rzp88 does not sell your personal data to third parties. We share personal data only in the following circumstances:

6.1 Service Providers

rzp88 engages third-party service providers who process personal data on our behalf under contractual obligations of confidentiality and data security. These include: payment processing partners (to facilitate deposits and withdrawals via Touch n Go eWallet, Boost, DuitNow, GrabPay, FPX, and other methods); identity verification service providers; cloud hosting and infrastructure providers; and customer support platform providers.

6.2 Game Providers

Certain technical data (such as your player session token and bet data) is shared with rzp88's game providers for the purpose of delivering game content and settling game outcomes. Game providers are contractually prohibited from using this data for any purpose other than game delivery and operation.

6.3 Regulatory and Legal Disclosure

rzp88 may disclose your personal data to its licensing authority, law enforcement agencies, or other regulatory bodies where required by law, court order, or lawful request. rzp88 will notify you of any such disclosure where permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of rzp88's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

7. Cookies and Tracking Technologies

rzp88 uses cookies and similar technologies on rzp88.app to enable core platform functionality, maintain your login session, detect fraud, and collect analytics data. The categories of cookies used by rzp88 include:

• Strictly necessary cookies: Required for basic platform operation, including session management and security. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language and display settings. Disabling these may affect platform functionality.
• Analytics cookies: Used to collect aggregated usage statistics that help rzp88 understand how the platform is used and where improvements can be made. No personally identifiable information is included in these aggregated reports.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and multiple-account creation.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may impair your ability to use some features of rzp88.

8. Data Retention

rzp88 retains your personal data for as long as your account remains active and for a period of five (5) years following account closure, in order to comply with our obligations under our international gaming licence, anti-money laundering regulations, and applicable tax laws. KYC documentation and transaction records are retained for a minimum of five (5) years from the date of the relevant transaction or the account closure date, whichever is later.

Marketing preferences and communications data is retained until you withdraw your marketing consent, after which it is deleted within thirty (30) days except to the extent a record of the withdrawal itself is required for compliance purposes.

Usage and behavioural data used for analytics is retained in aggregated, de-identified form for up to three (3) years.

9. Security Measures

rzp88 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, loss, or destruction, including:

• SSL/TLS encryption for all data transmitted between your device and rzp88 servers.
• Encryption of sensitive data fields at rest, including passwords (stored as salted cryptographic hashes) and KYC document data.
• Access controls limiting rzp88 staff access to personal data on a need-to-know basis, with all access logged and auditable.
• Regular penetration testing and vulnerability assessments of the rzp88 platform and infrastructure.
• Multi-factor authentication requirements for rzp88 staff accessing systems containing personal data.
• Incident response procedures for detecting, containing, and notifying affected parties in the event of a data breach.

While rzp88 takes its data security obligations seriously, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your rzp88 account and to enable two-factor authentication.

10. Your Privacy Rights

In respect of your personal data held by rzp88, you have the following rights:

• Right of access: You may request a copy of the personal data rzp88 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data. For some data fields, you can update information directly in your rzp88 account settings.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected. Note that rzp88 may be required to retain certain data for legal and regulatory compliance reasons even after a deletion request.
• Right to restrict processing: You may request that rzp88 restrict its processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is carried out on the basis of consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of rzp88's legitimate interests. rzp88 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact rzp88 as described in Section 15. rzp88 will respond to valid requests within thirty (30) days, subject to identity verification. No fee is charged for exercising these rights, except where requests are manifestly unfounded or excessive.

11. Marketing Communications

rzp88 may send you promotional emails, SMS messages, or in-platform notifications about new games, promotions, bonuses, and other rzp88 offers, subject to your consent. You may withdraw your marketing consent at any time by:

• Updating your communication preferences in your rzp88 account settings.
• Clicking the unsubscribe link included in any rzp88 marketing email.
• Contacting rzp88 support as described in Section 15.

Withdrawal of marketing consent will not affect your ability to use your rzp88 account or receive transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) that are required for the operation of your account.

rzp88 will not send marketing communications to players who have self-excluded or who have been identified by rzp88's responsible gaming monitoring as potentially vulnerable players.

12. Children's Privacy

rzp88 employs age verification measures at account registration and may request documentary proof of age at any point. If you are a parent or guardian and believe your child has created an rzp88 account, please contact us immediately using the contact details in Section 15.

13. International Data Transfers

rzp88 operates internationally and may transfer your personal data to, or store it on, servers located outside Malaysia. Where such transfers occur, rzp88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to Malaysian data protection requirements, including the use of contractual data protection clauses with receiving parties.

In particular, certain third-party service providers used by rzp88 (including cloud infrastructure providers and game providers) may process data in jurisdictions outside Malaysia. All such providers are contractually required to maintain appropriate technical and organisational security measures.

14. Changes to This Privacy Policy

rzp88 reserves the right to update or modify this Privacy Policy at any time. Any changes will be published at rzp88.app/privacy-policy and the "last updated" date at the top of this policy will be revised accordingly. Where changes are material, rzp88 will make reasonable efforts to notify registered account holders via email or in-platform notification prior to the changes taking effect.

Your continued use of rzp88 following publication of a revised Privacy Policy constitutes acceptance of the updated policy. If you do not agree with any change, you may request account closure as described in the rzp88 Terms & Conditions.

15. Contact Information

For any questions, concerns, or requests relating to this Privacy Policy or rzp88's handling of your personal data, please contact rzp88 through the following channels:

• Live Chat: Available 24/7 via the rzp88 platform.
• Email: [email protected]

rzp88 aims to respond to all privacy-related enquiries within five (5) business days. For subject access requests or requests to exercise other data rights, please allow up to thirty (30) days from receipt of your verified request.