Privacy Policy

At rexx88, we take the privacy and security of our members' personal information seriously. This Privacy Policy ("Policy") describes in detail how rexx88 ("we", "us", "our", "the Platform", "the Company") collects, processes, stores, shares, and protects personal data when you use any part of our online betting and gaming services, including our website, mobile platform, live chat, and customer support channels (collectively, "the Service"). This Policy applies to all current and prospective rexx88 members located in Indonesia and elsewhere. By registering an Account or using the Service, you confirm that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should discontinue use of the Service immediately.

1. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information that directly or indirectly identifies a natural person, including but not limited to name, date of birth, national identity number (NIK), email address, phone number, bank account details, IP address, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, transmission, deletion, or destruction.
• "Data Controller" means rexx88, the entity that determines the purposes and means of processing Personal Data.
• "Data Subject" means the individual (you, the Player or User) whose Personal Data is being processed.
• "Consent" means a freely given, specific, informed, and unambiguous indication of agreement to the processing of Personal Data.
• "Cookie" means a small text file placed on your device by our website to enable session management, preference storage, and analytics functionality.
• "Third-Party Service Provider" means any external company or individual engaged by rexx88 to assist in delivering the Service, subject to confidentiality obligations.

2. Information We Collect

2.1 Information You Provide Directly

When you create an Account, complete KYC verification, make a deposit, request a withdrawal, or contact our customer support team, you may provide the following categories of Personal Data:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (Indonesian KTP number, passport number, or driver's license number).
• Contact Information: Email address, Indonesian mobile phone number, and residential address (including city, province, and postal code).
• Financial Information: Bank account name and number (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon, BSI, Bank Permata), e-wallet account identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja), and transaction history.
• Verification Documents: Scanned or photographed copies of identity documents submitted during KYC procedures.
• Communications: Records of messages exchanged with our customer support team via live chat, WhatsApp, or email.

2.2 Information Collected Automatically

When you access and use our Service, we automatically collect technical and behavioral data, including:

• Device and Network Data: IP address, device type and model, operating system, browser type and version, screen resolution, and mobile network operator.
• Usage Data: Pages visited, features used, bets placed, games played, session duration, click patterns, and navigation paths within the Platform.
• Geolocation Data: General geographic location derived from IP address to determine your country and region (Indonesia, specific province or city).
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and local storage objects used for authentication, personalization, and analytics purposes (see Section 7 for full Cookie Policy).

2.3 Information from Third Parties

We may receive additional Personal Data from the following sources:

• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay) for transaction verification and fraud prevention.
• Identity verification service providers engaged for KYC compliance.
• Sports data providers and game content studios for bet settlement and game functionality.
• Fraud detection and anti-money laundering (AML) screening services.

3. How We Use Your Information

rexx88 processes your Personal Data for the following lawful purposes:

Purpose	Categories of Data Used	Legal Basis
Account creation and management	Identity, Contact	Contractual necessity
KYC / age and identity verification	Identity, Verification Docs	Legal obligation
Processing deposits and withdrawals	Financial, Identity	Contractual necessity
Fraud prevention and AML compliance	Financial, Device, Usage	Legal obligation / Legitimate interest
Customer support and dispute resolution	Identity, Contact, Communications	Contractual necessity
Platform personalization and recommendations	Usage, Device	Legitimate interest / Consent
Responsible gaming monitoring	Usage, Financial	Legal obligation / Legitimate interest
Marketing and promotional communications	Contact, Usage	Consent
Security, technical maintenance, analytics	Device, Usage, Geolocation	Legitimate interest

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

rexx88 engages carefully selected third-party service providers who assist in operating our Platform. These providers only receive Personal Data to the extent strictly necessary for their specific function and are contractually obligated to maintain confidentiality and implement appropriate security measures. Categories of third-party providers include:

• Payment Processing Partners: Indonesian banks (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Danamon) and e-wallet platforms (OVO, DANA, GoPay, ShopeePay, LinkAja) for secure transaction processing.
• Game Content Providers: Licensed studios including Pragmatic Play, Evolution Gaming, Habanero, Microgaming, NetEnt, PG Soft, and Spribe receive session tokens and anonymized player identifiers necessary for game operation and fair play certification.
• Identity Verification Services: KYC technology providers that validate government-issued documents and confirm player identity and age.
• Fraud Prevention and AML Screening: Specialized services that analyze transaction patterns to detect suspicious activity.
• Cloud Infrastructure and Hosting: Secure data center providers that store platform data using encrypted infrastructure with geographic redundancy.
• Analytics Providers: Anonymized usage analytics to improve Platform performance and user experience.

4.2 Legal and Regulatory Disclosure

rexx88 may disclose Personal Data to law enforcement, regulatory bodies, courts, or other authorities if required to do so by applicable law, legal process, court order, or regulatory mandate. We will make commercially reasonable efforts to notify affected individuals prior to such disclosure where permitted by law.

4.3 Business Transfers

In the event of a merger, acquisition, corporate reorganization, or sale of all or a portion of our assets, your Personal Data may be transferred to the successor entity. We will notify affected members of any such transfer via email and/or prominent notice on the Platform, and you will have the option to request deletion of your Personal Data prior to transfer if the new entity's privacy practices are materially different from those described in this Policy.

4.4 No Sale of Personal Data

rexx88 does not sell, rent, or trade your Personal Data to any third party for their own independent marketing or commercial purposes. Any sharing of Personal Data is limited to the purposes described in this Policy and subject to appropriate safeguards.

5. Data Retention

We retain your Personal Data for as long as your Account remains active and for a period thereafter as required by applicable legal, regulatory, tax, and accounting obligations. The following retention periods generally apply:

• Account and Identity Data: Retained for the duration of the Account relationship plus a minimum of 5 years following Account closure, in accordance with anti-money laundering requirements.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of the transaction.
• KYC Verification Documents: Retained for the duration of the Account relationship plus 5 years following Account closure.
• Customer Support Communications: Retained for 3 years from the date of the interaction.
• Marketing Preferences and Consent Records: Retained until you withdraw consent plus 3 years thereafter as evidence of the consent history.
• Technical and Usage Logs: Retained for up to 12 months in identifiable form, then aggregated or anonymized for analytical purposes.

6. Data Security

6.1 Technical Safeguards

rexx88 implements industry-standard technical security measures to protect your Personal Data from unauthorized access, disclosure, alteration, and destruction, including:

• SSL/TLS Encryption: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols, visible via the HTTPS indicator in your browser.
• Database Encryption: Sensitive Personal Data fields are encrypted at rest using AES-256 encryption standards.
• Password Security: User passwords are stored exclusively as salted cryptographic hashes. We never store plaintext passwords.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their Accounts for an additional layer of access security.
• Firewalls and Intrusion Detection: Multiple layers of network security, including firewalls, intrusion detection systems, and DDoS mitigation.
• Regular Security Audits: Periodic penetration testing and vulnerability assessments conducted by independent security specialists.

6.2 Organizational Safeguards

Access to Personal Data within rexx88 is restricted on a strict need-to-know basis. All employees and contractors with access to Personal Data are subject to comprehensive confidentiality obligations, background checks, and regular data protection training. Unauthorized access or misuse of Personal Data by any staff member is subject to disciplinary action, including immediate termination and legal proceedings.

7. Cookies and Tracking Technologies

7.1 Types of Cookies Used

rexx88 uses the following categories of cookies and similar tracking technologies:

• Strictly Necessary Cookies: Essential for the Platform to function. These enable login sessions, security tokens, load balancing, and basic platform functionality. They cannot be disabled without breaking core services.
• Performance and Analytics Cookies: Collect anonymized data about how visitors interact with the Platform—pages visited, session duration, error messages—to help us improve performance and usability.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and notification preferences to provide a personalized experience.
• Marketing and Targeting Cookies: Used only with your prior consent to deliver relevant promotional content and measure campaign effectiveness. These cookies do not track your activity outside the rexx88 Platform.

7.2 Managing Your Cookie Preferences

You may control cookie settings through your web browser's privacy or settings menu. Most browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. You may also manage your marketing communication preferences through your Account settings or by contacting our support team.

8. Your Data Rights

As a Data Subject, you have the following rights with respect to your Personal Data held by rexx88. To exercise any of these rights, please contact our Data Protection team at the contact details provided in Section 11.

• Right of Access: You may request a copy of all Personal Data we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. Minor corrections (e.g., email address, phone number) can be made directly in your Account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we limit the processing of your Personal Data under certain circumstances, such as while a dispute about accuracy is being resolved.
• Right to Data Portability: You may request a machine-readable copy of Personal Data you have provided to us, for transfer to another service provider where technically feasible.
• Right to Object: You may object to processing of your Personal Data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

We will respond to all verified data subject requests within 30 days of receipt. In complex cases, we may extend this period by an additional 30 days and will notify you accordingly.

9. International Data Transfers

rexx88 primarily stores and processes data within secure data centers. Certain third-party service providers, including game content studios (Pragmatic Play, Evolution Gaming, etc.) and infrastructure providers, may process data in jurisdictions outside Indonesia. Where such transfers occur, rexx88 ensures that appropriate safeguards are in place to maintain data protection standards consistent with this Policy, including contractual protections and data processing agreements with all third-party recipients.

10. Children and Minors

The rexx88 Platform is strictly intended for individuals who are at least 21 years of age. We do not knowingly collect Personal Data from anyone under 21. If we discover that an Account has been created by or for a person under the age of 21, we will immediately close the Account, void any associated transactions, and delete the associated Personal Data. If you believe a minor has registered on our Platform, please contact us immediately at the details provided in Section 11.

11. Amendments to This Policy

rexx88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the nature of our services. Material amendments will be communicated to registered members via email notification and/or a prominent notice on the Platform at least 14 days before taking effect. Continued use of the Service following such notification constitutes acceptance of the revised Policy. The "Last Updated" date at the top of this page indicates when the most recent revisions were made.

12. Contact and Data Protection Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact the rexx88 Data Protection team through the following channels. All contact information is provided as plain text only and is not a clickable link:

• Email: [email protected]
• Live Chat: Available 24/7 through the Platform interface
• WhatsApp Support: +62 812 3456 7890
• Support Hours: 24 hours per day, 7 days per week (WIB, UTC+7)

We are committed to resolving all data privacy inquiries promptly, fairly, and in accordance with the principles set out in this Policy. If you are not satisfied with our response, you may have the right to escalate your concern to the relevant data protection authority in your jurisdiction.