Malaysia PDPA Compliance
Reza88 operates in full compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Every instance of data collection and use has a clear and legitimate purpose.
256-bit SSL Encryption
All data transmitted between your browser and Reza88's servers is protected by 256-bit SSL encryption — the same security standard used by leading financial institutions.
Your Data, Your Control
You have the right to access, correct, or request the deletion of your personal data at any time. Reza88 respects your rights as a data owner under the PDPA.
No Sale of Data to Third Parties
Reza88 does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes without your explicit consent.
Secure Data Storage
Your data is stored on servers protected by strict access controls, multi-layered firewalls, and round-the-clock security monitoring by reza88's dedicated cybersecurity team.
Easy Unsubscribe Options
You may opt out of receiving marketing communications from reza88 at any time, easily via the unsubscribe link in any email or through your account settings.
Contents
Introduction
reza88 ("we", "platform", "us") takes the privacy of its members very seriously. This Privacy Policy explains our practices regarding the collection, use, storage, protection, and disclosure of personal data collected through the platform reza88 accessible via the domain reza88.bet and related applications.
This document forms part of the agreement between you and reza88, and should be read alongside our Terms and Conditions. By registering an account or using any of the services reza88, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
We are fully compliant with the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs how personal data of Malaysian residents is collected and used by commercial organisations. Reza88 is registered as a data processor under the PDPA and takes this responsibility seriously.
Personal Data We Collect
reza88 collects several categories of personal data from members and visitors to our platform. Below is a detailed breakdown of the data we collect and how it is collected:
2.1 Data You Provide Directly
- Registration Information: Username, email address, Malaysian phone number, password (stored as an irreversible hash).
- Identity Information: Full name, identity card number (MyKad), date of birth — collected during the KYC (Know Your Customer) identity verification process.
- Financial Information: Bank account numbers or e-wallet details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX via Maybank2u or CIMB Clicks) registered for deposit and withdrawal purposes.
- Communication Information: The contents of your correspondence with the Reza88 customer support team via live chat or email.
2.2 Automatically Collected Data
- Usage Data: Betting records, game history, deposit and withdrawal transactions, login sessions.
- Technical Data: IP address, browser type, operating system, screen resolution, and device used.
- Cookie Data: Session cookies, preference cookies, and analytics cookies as described in Section 10.
- Location Data: Approximate location based on IP address for eligibility verification and fraud prevention purposes. We do not access your device's GPS location.
| Data Category | Example | Mandatory / Optional |
|---|---|---|
| Identity | Full name, MyKad number, date of birth | Mandatory (KYC) |
| Contact | Email, phone number | Mandatory |
| Financial | Bank account, e-wallet | Mandatory (withdrawal) |
| Usage | Betting history, login logs | Automatic |
| Technical | IP address, device | Automatic |
| Marketing | Communication preferences | Optional |
How We Use Your Data
reza88 uses your personal data only for the lawful purposes stated in this policy. We do not use your data beyond those stated purposes without first obtaining your consent.
3.1 Account Management & Services
This is the primary use of your data — including creating and managing your account, processing deposits and withdrawals in MYR, verifying your identity during the KYC process, and enabling you to access all reza88 including Sports Betting, slots, and Live Casino.
3.2 Security & Fraud Prevention
Your technical data and transaction history are used to detect and prevent fraudulent activity, money laundering, unauthorised access, and platform abuse. This protects both you and the wider member community reza88 as a whole.
3.3 Legal Compliance
As required under Malaysian law, including the PDPA, reza88 may need to process your data to comply with legal obligations, directives from relevant authorities, or court orders.
3.4 Marketing & Communications
With your consent, reza88 uses your data to send information about the latest promotions, exclusive member bonuses, and relevant product updates. You may withdraw this consent at any time.
3.5 Product Improvement
Anonymised and aggregated usage data is used by the product team reza88 to understand usage patterns, identify areas for improvement, and develop new features that benefit all members.
3.6 Responsible Gaming
Your gameplay data is used responsibly to identify signs of problem gambling and to connect you with appropriate support resources when needed. This forms part of reza88 on player protection.
Legal Basis for Data Processing
Under Malaysia's PDPA, reza88 processes your personal data on one or more of the following legal bases:
- Consent: You have given explicit consent for your data to be processed for a specific purpose, such as receiving marketing communications.
- Contract Performance: Processing is necessary to provide the reza88 platform services you have registered for.
- Legal Obligation: Processing is required to comply with applicable Malaysian law, including anti-money laundering legislation.
- Legitimate Interests: Processing is necessary for the legitimate interests of reza88 (such as fraud prevention) or those of a third party, provided these interests do not override your fundamental rights and freedoms.
Data Sharing with Third Parties
reza88 does not sell your personal data to any third party. However, in certain limited and legitimate circumstances, we may share your data with the following parties:
5.1 Service Providers
Third parties that help us operate the platform include payment service providers (e-wallet operators and banks that process your MYR transactions), game providers (Pragmatic Play, PG Soft, Habanero, and others that supply slots and casino games), cloud and server hosting providers, and anonymised analytics and performance monitoring services.
All third-party service providers are bound by strict data protection agreements and are only permitted to use your data for the specific purposes we have designated.
5.2 Regulatory Authorities
reza88 may disclose your data to Malaysian government authorities, law enforcement agencies, or relevant regulatory bodies when required to do so by law, court order, or valid official directive.
International Data Transfers
In the course of operating the platform reza88, your data may be transferred to or processed outside Malaysia — for example, by cloud service providers or international game providers. Any such transfer will be carried out with appropriate safeguards to ensure your data remains protected to a standard equivalent to Malaysia's PDPA.
We ensure that all third parties outside Malaysia who handle your data are bound by data protection agreements that reflect PDPA standards and provide an adequate level of protection.
Data Retention Period
reza88 retains your personal data only for as long as it is needed for the purpose it was collected, or as required by law. The following are our general data retention guidelines:
| Data Category | Retention Period | Reason |
|---|---|---|
| Active account information | For as long as the account remains active | Contract performance |
| Financial transaction records | 7 years after transaction | Legal requirement |
| KYC / identity verification records | 5 years after account closure | Legal requirement |
| Betting logs | 3 years | Audit & disputes |
| Support communication logs | 2 years | Dispute resolution |
| Marketing data | Until consent is withdrawn | Consent-based |
Once the retention period expires, your data will be securely deleted or permanently anonymised so that it can no longer be linked to you personally.
Data Security
reza88 implement comprehensive technical and organisational security measures to protect your personal data against unauthorised access, modification, disclosure, or destruction.
8.1 Technical Measures
- Data-in-Transit Encryption: All communications between your browser and reza88's servers are secured with 256-bit SSL/TLS encryption.
- Data-at-Rest Encryption: Sensitive data stored on our servers, including passwords (in hashed form) and financial information, is encrypted using the latest industry standards.
- Access Controls: Access to members' personal data within reza88's internal systems is restricted solely to staff who require it to perform their duties.
- Two-Factor Authentication: Available to all member accounts and mandatory for internal system access by staff.
- Security Monitoring: A 24/7 monitoring system that automatically detects and responds to cybersecurity threats.
8.2 Incident Management
In the event of any data breach that may affect your rights and freedoms, reza88 committed to notifying you within a reasonable timeframe and taking all necessary steps to mitigate the impact of the incident in accordance with the procedures set out under Malaysia's PDPA.
Your Rights Under the PDPA
As a data subject under Malaysia's PDPA, you have several important rights regarding your personal data held by reza88. We are committed to making it easy for you to exercise these rights.
Access Rights
You have the right to know what personal data Reza88 holds about you and to obtain a copy of it.
Right to Rectification
If your data is inaccurate or incomplete, you have the right to request that Reza88 correct it promptly.
Right to Erasure
You may request the deletion of your personal data, subject to any applicable legal retention obligations.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time, without providing a reason.
Right to Restrict Processing
In certain circumstances, you may request that reza88 restrict the processing of your data while a dispute is being resolved.
Right of Data Access
You have the right to receive your personal data in a machine-readable format and to transfer it to another provider.
Cookies & Tracking Technologies
reza88 uses cookies and similar tracking technologies to ensure the platform functions correctly, enhance the user experience, and analyse usage patterns. Cookies are small text files stored on your device when you visit our platform.
10.1 Types of Cookies We Use
Cookies essential for core platform functions such as login authentication, session security, and processing MYR transactions. Without these cookies, the platform will not function properly.
Saves your preferences such as language, display settings, and game preferences so you don't have to reconfigure them each time you visit the reza88 platform.
Helps us understand, in aggregate and anonymised form, how members use the reza88 platform — the most visited pages, time spent, and more — so we can improve the experience for all users.
You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of the platform. reza88.
Children's Privacy
Platform reza88 is strictly for users aged 18 and above. We do not accept registrations from minors and do not knowingly collect personal data from children or individuals under the age of 18.
Should we discover that personal data has been collected from a minor without our knowledge, we will take immediate steps to delete that data and close the account in question. If you have reason to believe that someone under the age of 18 has registered on the platform reza88, please contact us at privacy@reza88.bet promptly.
Privacy Policy Amendments
reza88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, current legal requirements, or technological developments. Any changes will take effect upon publication on our platform.
For significant amendments, we will notify you via an in-platform notification or your registered email at least 14 days before the changes take effect. Your continued use of the reza88 after the effective date of any amendment shall be considered acceptance of the updated policy.
We recommend checking this page periodically to stay informed of how reza88 protecting your privacy. The "Updated" date at the top of this page indicates when this Privacy Policy was last revised.
Contact Us & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or how reza88 handles your personal data, please contact our Data Protection Officer (DPO):
Related Documents
Reza88 is committed to protecting your personal data to the highest standards in compliance with Malaysia's PDPA. If you have any privacy concerns or need help exercising your rights, please contact us or visit the Responsible Gaming ours.
Your Data Is Safe at reza88 — Play with Confidence
Register for free today and enjoy a safe, fair, and protected betting experience. Over 500,000 Malaysian members have trusted Reza88 with their betting choices and personal data privacy.