rexx88 Privacy Policy

rexx88 is committed to protecting the privacy and personal data of every player who uses its platform. As an international online betting and gaming operator serving players primarily based in Indonesia, rexx88 processes personal data in the course of providing its sportsbook, live casino, slots, table game, and related services.

This Policy applies to all personal data collected through the rexx88 website at rexx88.net, any associated mobile-optimised interfaces, customer support channels, and marketing communications. It covers data collected both before and after account registration.

rexx88 takes its data protection obligations seriously. We maintain technical and organisational security measures consistent with international best practice, and we limit data collection to what is genuinely necessary for the operation of our platform and the fulfilment of our legal obligations.

The following definitions apply throughout this Privacy Policy:

rexx88 collects Personal Data across several categories, depending on your interactions with the Platform:

3.1 Identity and Contact Data

• Full legal name as it appears on a government-issued identity document
• Date of birth (for age verification purposes)
• Residential address, including city, province, and postal code
• Email address
• Mobile phone number
• Government-issued identification number (e.g., NIK from Indonesian KTP)

3.2 Financial Data

• Bank account details (account number, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga) for processing deposits and withdrawals
• E-wallet identifiers (OVO, DANA, GoPay, ShopeePay, LinkAja) where used as a payment method
• Transaction history: deposit amounts, withdrawal requests, timestamps, and payment method used
• Account balance history

3.3 Account and Gaming Activity Data

• Username and encrypted password hash
• Betting and gaming history: wagers placed, game titles accessed, outcomes, and session durations
• Bonus claims and promotional activity
• Responsible gaming settings applied to your Account (deposit limits, self-exclusion status)

3.4 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Session logs, login timestamps, and access event records
• Cookie identifiers and similar tracking technology data (see Clause 11)

3.5 Communications Data

• Records of live chat conversations with the rexx88 support team
• Email correspondence sent to or received from rexx88
• Complaint and dispute records

rexx88 collects Personal Data through the following channels:

1. Direct Submission. Data you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
2. Automated Collection. Technical data collected automatically as you navigate the Platform, including IP address, device identifiers, browser type, session activity, and cookie data. This collection occurs without any action required from you beyond accessing the site.
3. Third-Party Payment Processors. Confirmation and reference data from the payment processors and banks that handle your deposit and withdrawal transactions. rexx88 does not receive or store full bank card numbers through this channel.
4. Identity Verification Partners. Where rexx88 uses a third-party KYC service to verify your identity document against official databases, that service may return verification results and flags to rexx88 as part of the KYC process.
5. Game Providers. Aggregated session and game-outcome data from rexx88's game studio partners (Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, Microgaming, NetEnt, and others) as part of normal game logging and dispute resolution processes.

rexx88 processes your Personal Data for the following specific and documented purposes:

rexx88 does not process your Personal Data for any purpose not listed above without first obtaining your explicit consent or establishing a separate lawful basis.

rexx88 processes your Personal Data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity. Processing that is required to perform the contract between you and rexx88 — including Account registration, payment processing, and game delivery — is carried out on the basis that it is necessary for the fulfilment of the Terms & Conditions you have accepted.
• Legal Obligation. Processing carried out to comply with rexx88's legal obligations, including anti-money laundering requirements, KYC obligations, and fraud prevention mandates imposed by applicable regulation.
• Legitimate Interests. Processing necessary for the pursuit of rexx88's legitimate business interests, including platform security, abuse prevention, product analytics, and improvement of services, where those interests are not overridden by your rights and interests.
• Consent. Where rexx88 sends promotional communications or processes data for optional personalisation features, it does so on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

rexx88 does not sell, rent, or trade your Personal Data to any third party for marketing or commercial purposes. rexx88 shares Personal Data only in the following limited circumstances:

1. Payment Processors and Banking Partners. Your financial data is shared with the relevant Indonesian bank (BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata) or e-wallet provider (OVO, DANA, GoPay, ShopeePay, LinkAja) to the extent necessary to process your specific transaction. These partners are bound by their own regulatory obligations and contractual data protection requirements.
2. Identity Verification Services. Where a third-party KYC provider is used, the identity data required for verification is transmitted to that provider under a Data Processing Agreement that prohibits any secondary use of your data.
3. Game Studio Partners. Session reference data is shared with rexx88's game content providers (including Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, Microgaming, and NetEnt) to the extent required to deliver games, settle results, and resolve disputes. These partners operate under contractual obligations that restrict their use of shared data.
4. Legal and Regulatory Authorities. rexx88 will disclose Personal Data to competent law enforcement authorities, regulators, or courts where required to do so by applicable law, court order, or binding regulatory directive. rexx88 will notify you of such disclosures where legally permitted to do so.
5. Business Transfers. In the event of a merger, acquisition, or sale of all or part of rexx88's business, your Personal Data may be transferred to the acquiring entity, subject to equivalent data protection commitments being maintained by that entity.

As an internationally operated platform serving Indonesian players, rexx88 may transfer Personal Data to servers or service providers located outside Indonesia. Where such transfers occur, rexx88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Indonesian and international data protection law.

Safeguards used by rexx88 for international data transfers include:

• Standard contractual clauses incorporated into agreements with Data Processors located in third countries.
• Transfers only to jurisdictions that maintain adequate data protection frameworks recognised by rexx88's licensing authorities.
• Technical security measures (encryption in transit and at rest) applied to all cross-border data transfers.

You may request information about the specific international transfer mechanisms applicable to your data by contacting rexx88 at the details provided in Clause 16.

rexx88 retains your Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

rexx88 implements a layered security architecture to protect your Personal Data against unauthorised access, loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the rexx88 platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher).
• Password Security: Passwords are never stored in plain text. rexx88 uses one-way cryptographic hashing algorithms so that account passwords cannot be retrieved or read by rexx88 staff.
• Access Controls: Access to systems holding Personal Data is restricted to authorised personnel on a need-to-know basis. All internal access is logged and subject to regular audit.
• Data Encryption at Rest: Sensitive Personal Data stored on rexx88 servers is encrypted at rest using AES-256 encryption.
• Anomaly Detection: rexx88 operates automated systems that monitor for unusual login activity, including logins from new devices or geographic locations, and triggers additional verification steps where anomalies are detected.
• Penetration Testing: The rexx88 platform undergoes periodic security assessments and penetration testing by qualified security professionals to identify and remediate vulnerabilities proactively.

While rexx88 takes all reasonable precautions to protect your data, no system connected to the internet can be guaranteed to be completely secure. You are responsible for maintaining the security of your own Account credentials. rexx88 will never ask for your password via email, live chat, or any other channel.

rexx88 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

1. Strictly Necessary Cookies. Essential for the basic operation of the Platform, including maintaining your login session, managing your Account wallet state, and ensuring platform security. These cookies cannot be disabled without materially impairing your ability to use the Platform.
2. Functional Cookies. Remember your preferences and settings — such as your preferred language, last-used payment method, and responsible gaming configuration — so that you do not need to re-enter them on each visit.
3. Analytics Cookies. Collect anonymised data about how users navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve platform performance and user experience. rexx88 uses analytics data only in aggregated, non-personally identifiable form.
4. Security Cookies. Support fraud detection and bot prevention systems by maintaining integrity signals about your session and device environment.

Most web browsers allow you to control cookies through their settings preferences. Disabling strictly necessary cookies will impair Platform functionality. Disabling functional or analytics cookies will not prevent you from using the Platform but may result in a less personalised experience. Your browser settings apply to cookie management; rexx88 does not operate a separate cookie preference centre at this time.

As a data subject, you hold the following rights in relation to your Personal Data held by rexx88. These rights are subject to applicable legal limitations and, where rexx88 is required to retain data to fulfil legal obligations (such as AML requirements), those obligations take precedence.

To exercise any of the above rights, please contact the rexx88 Data team using the details in Clause 16. We will verify your identity before processing any rights request and will respond within 30 calendar days. Complex requests may require up to 90 days; we will notify you if an extension is required.

The rexx88 Platform is strictly restricted to individuals who are 21 years of age or older. rexx88 does not knowingly collect Personal Data from any individual under 21. Age verification is a mandatory step in the Account registration and KYC process, and rexx88 employs technical and documentary controls to enforce this restriction.

If rexx88 becomes aware that Personal Data has been collected from an individual under 21 years of age, it will take immediate steps to delete that data, close the associated Account, and — where required — report the incident in accordance with its responsible gaming and regulatory obligations. If you are a parent or guardian and believe your child has registered an Account on rexx88, please contact us immediately at the address provided in Clause 16.

The rexx88 Platform may contain references to or integrations with third-party services — including game studio content delivered by Pragmatic Play, Evolution Gaming, Spribe, Pocket Games Soft, Microgaming, and NetEnt. When you interact with content delivered directly from a third-party game provider's environment, that provider's own privacy policy governs the collection of data within their environment.

rexx88 is not responsible for the privacy practices or content of any third-party services accessed through the Platform. rexx88 recommends reviewing the privacy policies of any third-party providers whose services you access. This Policy covers only data collected directly by rexx88 through rexx88.net and its associated interfaces.