How rex88 Handles Your Account Data
This is the rex88 privacy policy — a plain read of what we collect when you open an account, how we store it, and which third parties touch...
Data Posture and Jurisdictional Scope
We process your personal data only where local law permits and only for purposes tied to your rex88 account: identity checks, payment routing through DANA, OVO, GoPay and QRIS, lobby preferences, and fraud screening. Account records are retained for the period required by Indonesian financial regulations and supported regions equivalent. We do not sell your data to advertisers. Internal staff access is
logged and limited. Third-party game studios receive only the session token needed to load a slot or live table — never your wallet credentials. If you close your account, we anonymise transactional history once retention windows lapse, and you may request a data export through our support channel at any time.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Editorial Trust on Policy Review
Quarterly Review
We re-read this policy every quarter against current Indonesian data rules and update wording where supported regions shift. Version dates sit at the top of the page so you can track changes.
Named Owner
A single data protection lead signs off every revision rather than a rotating committee. That keeps the language consistent across rex88 and avoids contradictory clauses appearing between updates.
Plain Language
We rewrite legal phrasing into reader-level English so you don't need a lawyer to parse it. Where a regulated term must stay, we add a short bracketed gloss next to it.
Vendor Audit
Every studio and payment partner we route data to gets reviewed annually. If a vendor fails our data-handling check, we drop the integration before the next policy publish.
Breach Posture
We commit to a 72-hour notification window if any incident touches your rex88 account data, with direct email rather than a buried site banner.
Change Log
Every clause edit lands in a public change log at the foot of this page so returning readers can see what shifted between versions without comparing full documents.
Consistency Across Sibling Policy Pages
| Terms of Service | Account-conduct rules live there; data-handling rules live here. Where the two overlap we reference the clause number so you don't read conflicting wording across pages. |
|---|---|
| Cookie Notice | Browser-storage detail sits in a dedicated cookie page. This privacy policy only summarises categories so the main read stays focused on account data. |
| AML Statement | Identity-verification triggers are described in our AML page. Here we cover only what data those checks generate and how long we keep it on file. |
| Payment Disclosures | DANA, OVO, GoPay and QRIS handling is referenced here at posture level; full processor terms are linked separately so you can read each provider's own statement. |
| Marketing Preferences | Opt-in and opt-out controls are managed inside your rex88 account settings, with the legal basis for each channel explained in this document. |
| Retention Schedule | A standalone retention table backs up the windows mentioned in this policy, broken down by data category so audit checks line up cleanly. |
| Regional Addenda | Indonesia-specific clauses appear inline; supported-region addenda sit beneath the main body so cross-border readers see the same baseline first. |