Privacy Policy

rzzz operates the online gaming platform accessible at https://rzzz.cam, providing Indonesian players with sports betting, live casino, slot games, and togel (Indonesia's traditional numbers lottery) services. As part of operating this Platform, we collect and process personal data about our registered Players and visitors.

This Privacy Policy applies to all personal data collected by rzzz through the Platform, including data collected via the website, any associated mobile applications, customer support interactions, and communications channels such as email, live chat, and WhatsApp. It applies to all individuals who access the Platform from Indonesia and from any other territory, regardless of whether they have created a registered Account.

rzzz is committed to handling personal data in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, storage limitation, accuracy, integrity, and confidentiality.

• "Personal Data" means any information that identifies or could reasonably be used to identify a living individual, directly or in combination with other information.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• "Data Controller" means rzzz, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means a third party that processes Personal Data on behalf of rzzz under a contractual data processing agreement.
• "Player" / "User" / "You" means any individual who registers, accesses, or interacts with the rzzz Platform.
• "KYC Data" means identity and address verification documentation submitted as part of the Know Your Customer process.
• "Cookies" means small text files placed on your device by our Platform to enable core functionality, analytics, and session management.
• "Sensitive Data" means a subset of Personal Data that warrants heightened protection, including government-issued identity document numbers and financial account details.

rzzz collects the following categories of personal data, depending on your interaction with the Pla tform:

We do not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If any such data is incidentally submitted (for example, in a support message), it will not be processed for any purpose beyond resolving the specific support enquiry.

rzzz collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when creating an Account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your Account profile.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies as you interact with the Platform.
• Payment processors: Confirmation and status data returned by our payment partners (including local bank transfer gateways and e-wallet providers such as OVO, DANA, and GoPay) when you initiate a financial transaction.
• Identity verification providers: Data returned by our third-party KYC and anti-fraud service providers as part of the identity verification process.
• Third-party analytics: Aggregated and anonymised usage data from analytics providers we use to improve Platform performance and user experience. This data cannot be used to identify you individually.

rzzz processes your personal data only where a lawful basis exists. The following table sets out the purposes for which we process personal data and the corresponding legal basis for each:

Where we rely on legitimate interests as a legal basis, we have assessed that our interests are not overridden by your fundamental rights and freedoms, taking into account the reasonable expectations of Players using an international online gaming platform.

rzzz uses cookies and similar technologies to ensure the Platform functions correctly, to remember your preferences, and to understand how Players use our services. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to operate. These enable core functions such as session authentication, login state maintenance, and security protections. These cookies cannot be disabled without significantly impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and last-visited game category to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how Players navigate the Platform — including pages visited, time on site, and error occurrences — to help us improve performance and usability.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and multiple-account abuse. These cookies are critical to maintaining a fair and secure environment for all Players.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies may prevent you from accessing certain parts of the Platform or may impair game functionality. rzzz does not use third-party advertising or retargeting cookies.

rzzz does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances, and only to the minimum extent necessary:

• Payment service providers: Indonesian bank transfer gateways and e-wallet operators (including those supporting BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions) receive the financial data necessary to process your deposit or withdrawal.
• KYC and identity verification providers: Third-party services that verify the authenticity of identity documents submitted during the KYC process receive the identity data necessary to complete that verification.
• Game content providers: Studio providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive a pseudonymous Player identifier and game session data necessary to deliver their games. They do not receive your full identity or financial data.
• IT and infrastructure providers: Cloud hosting, data storage, and security service providers who process data on our behalf under strict contractual data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory demand, rzzz may disclose personal data to law enforcement, financial intelligence units, or other competent authorities. We will notify you of any such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of rzzz's business assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party Data Processors engaged by rzzz are contractually required to process personal data only in accordance with rzzz's instructions, to maintain appropriate technical and organisational security measures, and to handle data in a manner consistent with this Privacy Policy.

As an internationally operated platform serving Indonesian players, rzzz may transfer personal data to servers and service providers located outside of Indonesia. Where such transfers occur, rzzz ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards employed for international data transfers include:

• Contractual data transfer agreements incorporating internationally recognised standard contractual clauses.
• Transfer only to jurisdictions that maintain adequate data protection frameworks.
• Technical measures including end-to-end encryption during transit and AES-256 encryption at rest for all data stored on international servers.

If you would like further information about the specific safeguards applied to any international transfer of your personal data, please contact our Data Protection Officer at the details provided in Section 16.

rzzz implements enterprise-grade technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security infrastructure includes:

• SSL/TLS 256-bit encryption on all data transmitted between your device and our servers.
• AES-256 encryption at rest for all sensitive data stored in our databases, including KYC documents and financial account details.
• Two-factor authentication (2FA) available to all Players and mandatory for administrative access to internal systems.
• Role-based access controls (RBAC) ensuring that only personnel with a legitimate operational need can access specific categories of personal data.
• Regular penetration testing and third-party security audits conducted at least annually.
• 24/7 intrusion detection systems and automated anomaly alerts to identify and respond to potential security incidents in real time.
• Data breach response plan ensuring that in the event of a confirmed breach, affected Players are notified promptly and relevant authorities are informed in accordance with applicable legal requirements.

While rzzz takes every reasonable precaution to secure your data, no internet transmission or electronic storage system is 100% secure. You also play a role in keeping your data safe — please refer to the account security guidance in our Terms & Conditions.

rzzz retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to our obligations under applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

As a Player whose personal data is processed by rzzz, you hold the following rights in respect of your data. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 16. rzzz will respond to all valid requests within 30 calendar days.

Note that certain rights are not absolute — for example, we cannot erase data that we are legally required to retain for AML or regulatory compliance purposes. Where we are unable to fulfil a request in full, we will explain the reason in writing.

The rzzz Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in our registration and KYC process precisely to prevent underage access.

If rzzz discovers or is notified that an Account has been created by a person under the age of 21, the Account will be immediately suspended and all associated personal data will be deleted without retention, except to the extent required to document the underage access incident for compliance records. If you believe a minor has accessed the rzzz Platform, please notify us immediately at [email protected].

The rzzz Platform does not contain links to external third-party websites as a general matter of policy. If any informational references to external organisations appear on the Platform (for example, in responsible gaming guidance), rzzz is not responsible for the privacy practices of those external entities. We encourage you to review the privacy policies of any third-party websites you visit independently.

Game content delivered within the rzzz Platform by licensed studio providers (such as Pragmatic Play, Evolution Gaming, and Spribe) operates within the Platform's iFrame or native environment. Player data passed to game studios is limited to the pseudonymous session identifiers necessary for game operation; your full identity and financial data are not shared with game content providers.

rzzz may send you promotional communications — including information about deposit bonuses, seasonal promotions (such as Idul Fitri specials, Ramadhan offers, and major sporting event promotions covering BRI Liga 1, Champions League, and FIFA World Cup campaigns), and new game releases — by email, SMS, or WhatsApp, but only where you have given your explicit consent to receive such communications at the time of registration or through your Account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the Account settings dashboard.
• Clicking the "unsubscribe" link included in every marketing email.
• Contacting our support team directly at [email protected] with a request to opt out.

Please note that withdrawing marketing consent does not affect your receipt of essential transactional communications, such as deposit confirmations, withdrawal notifications, Account security alerts, and important policy updates. These operational communications are sent on the basis of contract performance and cannot be disabled while your Account is active.

rzzz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered Players by email to the address on file and by posting a prominent notice on the Platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how rzzz protects your data. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

Previous versions of this Privacy Policy are archived and available upon request by contacting our Data Protection Officer.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by rzzz, please contact our Data Protection Officer through the following channel:

When submitting a data access, rectification, or erasure request, please include your full name, registered email address, and Account username so that we can locate your records efficiently and verify your identity before processing the request. rzzz will not action data requests from unverified individuals to protect against fraudulent access to another person's data.

For questions about responsible gaming tools, self-exclusion, or deposit limits, please visit our dedicated Responsible Gaming page or contact support directly. For general Platform questions and account guidance, visit our FAQ page.