rex88 Privacy Policy

The following terms carry the meanings set out below throughout this Privacy Policy:

rex88 collects the minimum personal data necessary to provide a safe, compliant, and personalised gaming experience. The categories of data we collect are described in the table below:

rex88 collects personal data through the following channels:

3.1 Directly from You

The majority of your personal data is provided directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account profile. You are always informed at the point of collection about the purpose for which the data is requested.

3.2 Automatically via Technology

When you access the Platform, our servers automatically record technical and usage data including your IP address, device identifiers, browser type, and session activity. This data is collected via server logs, cookies, and similar tracking technologies described in Section 7.

3.3 From Third-Party Service Providers

In limited circumstances, rex88 receives data about you from trusted third-party processors — for example, identity verification providers who cross-reference your KTP or passport details against official databases, and payment processors who confirm the ownership of your BCA, BRI, OVO, or DANA account. These providers are contractually bound to process your data solely for the purpose of their service to rex88 and may not use it independently.

3.4 From Fraud Prevention and AML Systems

rex88 participates in industry-standard anti-money-laundering and fraud-detection networks. These systems may flag accounts based on transaction patterns and cross-reference data against sanctions lists and Politically Exposed Persons (PEP) registries. Any data received through these channels is used exclusively for compliance and security purposes.

rex88 processes your personal data only where a valid lawful basis exists under applicable data protection law. The four bases we rely on are:

• Contractual Necessity: Processing required to fulfil our obligations under the Player Account Agreement — including account creation, identity verification, deposits, withdrawals, and customer support.
• Legal Obligation: Processing required to comply with applicable laws, regulations, and licensing conditions — including KYC, anti-money-laundering record-keeping, and responding to lawful regulatory requests.
• Legitimate Interests: Processing necessary for rex88's legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics for product improvement.
• Consent: Processing carried out on the basis of your freely given, specific, informed consent — principally for optional marketing communications. You may withdraw consent at any time by updating your preferences in the account dashboard or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

rex88 uses personal data for the following specific purposes, each tied to a lawful basis described in Section 4:

rex88 does not sell or rent personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

6.1 Service Providers (Processors)

rex88 engages third-party processors to support Platform operations, including payment processing partners (connected to BCA, BRI, BNI, Mandiri, CIMB Niaga, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, LinkAja networks), identity verification providers, cloud hosting infrastructure providers, and customer support technology vendors. All processors are bound by data processing agreements that prohibit them from using your data for any purpose other than fulfilling their contracted service to rex88.

6.2 Game Technology Providers

Game studios and live dealer providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) may receive anonymised session data necessary to render and audit game outcomes. These providers do not receive your name, bank details, or full contact information.

6.3 Legal and Regulatory Disclosure

rex88 may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where required to do so by applicable law, a valid legal order, or our licensing obligations. rex88 will, where legally permitted, notify affected players of such a disclosure request.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of rex88's assets, personal data held on the Platform may be transferred to the acquiring entity as part of that transaction. Affected players will be notified via the registered email address prior to any such transfer taking effect, and the acquiring entity will be bound by the terms of this Privacy Policy or an equivalent standard.

rex88 uses cookies and similar technologies to operate the Platform, enhance your experience, and gather analytical insights. A cookie is a small text file stored on your device when you visit the Platform.

7.1 Categories of Cookies We Use

7.2 Managing Cookies

You can control and delete cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling functional or analytical cookies will not prevent access but may reduce the personalisation of your experience. Instructions for managing cookies in the most common browsers — Chrome, Firefox, Safari, Edge, and Samsung Internet (commonly used on Android devices in Indonesia) — are available via each browser's help documentation.

rex88 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements imposed by our licensing and legal obligations:

When data reaches the end of its retention period, rex88 securely deletes it or irreversibly anonymises it so that it can no longer be linked back to you as an individual.

rex88 applies technical and organisational security measures proportionate to the sensitivity of the data held and the risks of unauthorised access, disclosure, alteration, or destruction. Our core security infrastructure includes:

• Transport Encryption: All data in transit is protected by TLS 1.2 or higher (256-bit SSL), confirmed by the padlock indicator in your browser's address bar when visiting rex88.vu.
• Data-at-Rest Encryption: Sensitive data stored on our servers — including financial records and KYC documents — is encrypted using AES-256.
• Password Security: Passwords are never stored in plain text. rex88 uses industry-standard one-way cryptographic hashing (bcrypt) with per-account salting.
• Access Controls: Access to personal data within rex88's internal systems is restricted to employees and contractors who require it to perform their specific role. Access is logged and audited regularly.
• Penetration Testing: The Platform undergoes regular third-party security assessments. Identified vulnerabilities are remediated under a documented patch management process.
• Incident Response: rex88 maintains a documented data breach response plan. In the event of a breach that is likely to result in a risk to your rights, we will notify affected players without undue delay and, where required by our licensing jurisdiction, notify the relevant regulatory authority.

As a player on the rex88 Platform, you hold the following rights over your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request" and your account username. We will respond within 30 calendar days.

10.1 Right of Access

You have the right to request a copy of all personal data rex88 holds about you, along with information about the purposes for which it is processed, the categories of data held, the recipients it has been shared with, and the retention period applicable to each category.

10.2 Right to Rectification

If any personal data rex88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. Certain corrections (such as changes to your legal name or date of birth) require documentary evidence to prevent fraud and maintain KYC integrity.

10.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other lawful basis exists, or where processing is unlawful. This right is subject to overriding legal retention obligations — rex88 is required to retain certain financial and KYC records for the periods specified in Section 8 regardless of an erasure request.

10.4 Right to Data Portability

Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON or CSV) and to transmit it to another controller. Contact our support team to request a data export.

10.5 Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. You can opt out via your account dashboard notification settings or by emailing [email protected] with "Unsubscribe" in the subject line. Opt-out requests are processed within 72 hours.

The rex88 Platform is strictly for adults aged 21 and over. rex88 does not knowingly collect personal data from any person under the age of 21. The Platform employs active age-verification measures during registration and KYC, and reserves the right to request documentary proof of age at any point during an account's lifecycle.

If rex88 becomes aware that personal data has been collected from a person under 21, the account will be immediately suspended, all associated balances and bonuses voided, and the personal data deleted from our systems as promptly as our legal obligations permit. If you believe a minor has registered an account on the Platform, please contact [email protected] immediately.

rex88 operates as an internationally licensed gaming platform. Your personal data may be transferred to, stored in, and processed in countries outside Indonesia where our hosting infrastructure, payment processors, and third-party game providers are located. These countries may have different data protection laws from those in Indonesia.

Whenever rex88 transfers personal data internationally, we ensure appropriate safeguards are in place to protect that data to an equivalent standard as described in this Privacy Policy. Such safeguards include:

• Contractual clauses binding the recipient to data protection obligations consistent with international best practice.
• Transfer to jurisdictions that maintain an adequate level of data protection as determined by our licensing authority.
• Binding corporate rules where data is transferred within a corporate group.

For further details about the safeguards applied to a specific international data transfer, contact [email protected].

The rex88 Platform does not contain links to external third-party websites. All navigation and content on the Platform is internal to rex88.vu. If you navigate away from the Platform by typing a different address in your browser, or through a source outside the Platform, rex88 has no control over the privacy practices of those external sites and this Privacy Policy does not apply to them.

Game studio interfaces rendered within the rex88 Platform (such as those provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft) are served within the rex88 environment and are subject to those providers' own terms of service with rex88. Personal data transmitted to these providers is limited to anonymised session identifiers as described in Section 6.2.

rex88 reviews this Privacy Policy at least once every twelve months and whenever there is a material change to our data processing practices, applicable law, or our licensing conditions. When we make changes, the revised policy will be published at rex88.vu/privacy-policy with an updated "Last Updated" date at the top of the document.

For material changes — meaning changes that significantly affect your rights or the way we handle your data — rex88 will notify registered players via the email address on file at least 14 days before the updated policy takes effect. Continued use of the Platform after the effective date of a revised policy constitutes acceptance of the updated terms.

We encourage you to revisit this page periodically to stay informed about how rex88 protects your data. The version number displayed alongside the "Last Updated" date allows you to track revisions over time.

rex88 takes privacy concerns seriously. If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how your personal data has been handled, please contact our Data Protection team:

15.1 Escalation and Complaints

If you are not satisfied with rex88's response to a privacy concern, you have the right to escalate your complaint to our licensing authority's designated complaints body. Details of the relevant supervisory authority and the escalation procedure are available on request by emailing [email protected] with the subject line "Regulatory Escalation Request".

rex88 is committed to resolving all privacy complaints promptly and fairly. We aim to provide a substantive written response to every formal complaint within 30 calendar days of receipt.