zplay88 Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") describes the data processing practices of zplay88 ("we", "us", "the Company") in relation to personal data collected from users ("you", "Player") of the zplay88 online gaming platform accessible at zplay88.win and its associated interfaces (collectively, the "Platform").

zplay88 is committed to safeguarding your personal data and to operating with transparency about how that data is handled. This Policy is intended to meet our disclosure obligations under applicable data protection legislation, including requirements imposed by our international gaming authority licence.

This Policy applies to all personal data collected through the Platform, including data provided during account registration, identity verification, payment transactions, customer support interactions, and general Platform usage.

---

2 Data We Collect

zplay88 collects the following categories of personal data from registered players and Platform users:

2.1 Registration Data

• Full legal name
• Date of birth (for age verification — players must be 21 years of age or older)
• Email address
• Username and password (stored in encrypted form)
• Country and city of residence (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya)
• Mobile number (optional, for security verification)

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Malaysian MyKad, passport)
• Proof of address documentation
• Selfie or live photograph where required for identity matching

2.3 Financial Data

• Payment method identifiers (e.g., Touch n Go eWallet account reference, bank account details for FPX or local bank transfers via Maybank, CIMB, or Public Bank)
• Transaction history (deposits, withdrawals, wager records)

2.4 Usage and Technical Data

• IP address and device identifiers at time of login
• Browser type and operating system
• Pages visited on the Platform, time spent, and navigation patterns
• Game session data and wagering history

2.5 Communications Data

• Records of Live Chat, email, and support ticket interactions
• Feedback, complaints, and correspondence submitted to zplay88

---

3 How We Use Your Data

zplay88 uses collected personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your zplay88 account, including processing login requests and managing account security.
• Age and Identity Verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity in compliance with KYC and anti-money laundering obligations.
• Payment Processing: Facilitating deposits and withdrawals via approved payment channels including Touch n Go eWallet, Boost, FPX, and local bank transfers.
• Regulatory Compliance: Fulfilling legal and regulatory obligations under our international gaming authority licence, including reporting requirements, fraud prevention, and anti-money laundering obligations.
• Customer Support: Responding to support requests submitted via Live Chat, email, or other support channels.
• Platform Improvement: Analysing aggregated usage data to improve Platform functionality, game performance, and user experience.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviours and to administer responsible gaming tools including deposit limits and self-exclusion where requested.
• Marketing Communications: Sending promotional offers, bonus notifications, and Platform updates to players who have opted in to receive such communications. Consent may be withdrawn at any time.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, cheating, collusion, and other prohibited conduct on the Platform.

---

4 Legal Bases for Processing

zplay88 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and zplay88 — including account registration, payment processing, and game access.
• Legal Obligation: Processing required to comply with regulatory requirements imposed by our gaming authority licence, anti-money laundering legislation, and other applicable law.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, Platform security, and service improvement — where such interests are not overridden by your fundamental rights.
• Consent: Processing based on your explicit consent, including the sending of marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

---

5 Data Sharing

zplay88 does not sell, rent, or trade your personal data to third-party advertising networks or data brokers. Personal data may be shared with third parties only in the following limited circumstances:

• Game Providers: Game software providers integrated with the zplay88 Platform may receive session data necessary to operate their games (e.g., player ID, wager amount, game outcome). These providers are contractually bound to process data only for the purposes of game provision and not for any independent marketing or profiling purposes.
• Payment Processors: Payment service providers including Touch n Go eWallet, Boost, and banking partners require transaction data to process deposits and withdrawals. These entities are subject to their own regulatory obligations.
• Identity Verification Services: Third-party KYC and age verification providers may process identity documents on behalf of zplay88 for the purposes of regulatory compliance.
• Regulatory Authorities: zplay88 may be required to disclose personal data to gaming regulatory authorities, financial intelligence units, or law enforcement agencies where required by law or our licensing obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of assets involving zplay88, personal data held by the Company may be transferred to the acquiring entity, subject to equivalent data protection obligations.

---

6 Cookies & Tracking

The zplay88 Platform uses cookies and similar tracking technologies to enhance Platform functionality, maintain session state, and analyse usage patterns. The categories of cookies used are as follows:

• Essential Cookies: Required for core Platform functionality including login session management and security verification. These cannot be disabled without affecting Platform access.
• Functional Cookies: Store your Platform preferences such as language settings and display options.
• Analytics Cookies: Aggregate anonymised usage data to help zplay88 understand how the Platform is used and to identify areas for improvement. No personally identifiable information is included in analytics reports.

You may adjust cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in to and use the zplay88 Platform.

---

7 Data Retention

zplay88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Active Account Data: Retained for the duration of your account's active status plus a period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, as required under regulatory obligations.
• Transaction Records: Retained for seven (7) years from the date of the transaction for financial record-keeping and regulatory audit purposes.
• Support Communications: Retained for three (3) years from the date of the last interaction, or longer if the communication relates to an ongoing dispute or regulatory matter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

---

8 Data Security

zplay88 implements technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and the zplay88 Platform.
• Encryption of sensitive data at rest, including passwords, payment identifiers, and identity documents.
• Access controls restricting internal access to personal data to authorised personnel on a strictly need-to-know basis.
• Regular security assessments and vulnerability testing conducted by qualified security professionals.
• Incident response procedures for the detection, reporting, and remediation of personal data breaches.

---

9 Your Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by zplay88:

• Right of Access: You may request a copy of the personal data zplay88 holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no legal retention obligation applies.
• Right to Restriction: You may request that processing of your personal data be restricted in certain circumstances, such as where you contest the accuracy of the data.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. This right is unconditional in respect of marketing.
• Right to Data Portability: Where technically feasible and legally applicable, you may request a copy of your personal data in a structured, machine-readable format.

To exercise any of these rights, please contact the zplay88 Data Privacy team via the Live Chat support channel or at the email address listed in Section 14. We will respond to all valid requests within 30 calendar days.

---

10 Children's Privacy

The zplay88 Platform is strictly restricted to individuals aged 21 years and above. zplay88 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any deposits will be returned at the Company's discretion following investigation.

If you believe a minor has registered on the zplay88 Platform, please contact our support team immediately.

---

11 International Data Transfers

As an internationally licensed online gaming platform, zplay88 may transfer personal data to countries outside your country of residence for the purposes of game provision, payment processing, and regulatory compliance. Where personal data is transferred internationally, zplay88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections applied within the jurisdiction of our gaming authority licence, including data processing agreements with third-party recipients.

---

12 Marketing Communications

zplay88 may send marketing communications including bonus offers, promotional notifications, and Platform updates to players who have explicitly opted in to receive such communications at the time of registration or via account settings.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from zplay88.
• Updating your communication preferences in your zplay88 account settings.
• Contacting the zplay88 support team via Live Chat with a written opt-out request.

Opt-out requests for marketing communications are processed within 5 business days. Withdrawing marketing consent does not affect the receipt of transactional communications (e.g., payment confirmations, account security alerts) which are sent as necessary for account management.

---

13 Policy Amendments

zplay88 reserves the right to amend this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or applicable law. Where material amendments are made, registered players will be notified via email or in-platform notification prior to the changes taking effect. The date of the most recent update is displayed at the top of this Policy. Your continued use of the Platform following the effective date of an amended Policy constitutes your acceptance of the revised terms.

---

14 Contact Us

For questions, requests, or complaints regarding this Privacy Policy or the processing of your personal data by zplay88, please contact our Data Privacy team:

• Live Chat: Available 24/7 via the zplay88 Platform. Average response time: 3–5 minutes.
• Email: [email protected]

We are committed to resolving all privacy-related inquiries promptly and transparently. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.