zplay88 Privacy Policy

1.Introduction

zplay88 ("zplay88", "we", "us", "our") operates the online gaming platform accessible at zplay88.club and through the zplay88 mobile application (collectively, the "Platform"). We are committed to protecting the personal information of all individuals who interact with our Platform, including registered Players, visitors, and prospective users.

This Privacy Policy ("Policy") describes the categories of personal data we collect, the purposes for which that data is processed, the circumstances under which it may be shared, the period for which it is retained, and the rights available to you in relation to your personal data. This Policy applies to all users of the zplay88 Platform, including Malaysian residents accessing the Platform from Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Bangsar, and elsewhere across Malaysia.

By registering an Account on the zplay88 Platform or by continuing to use the Platform following the effective date of this Policy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2.Data We Collect

zplay88 collects personal data in several categories, depending on how you interact with the Platform:

Category	Examples	When Collected
Identity Data	Full name, date of birth, NRIC or passport number, nationality	Registration & KYC Verification
Contact Data	Email address, Malaysian mobile phone number, residential address	Registration & Account updates
Financial Data	Payment method details (eWallet ID, bank account number), transaction history	Deposits, withdrawals & payment processing
Technical Data	IP address, device type, browser type, operating system, session identifiers	Automatically on Platform access
Usage Data	Game history, bet amounts, session duration, pages visited, feature interactions	Automatically during Platform use
Communications Data	Live chat transcripts, support email content, survey responses	When you contact zplay88 support
Marketing Preferences	Email and SMS opt-in status, preferred communication channels	Registration & Account Settings

2.1 Verification Documents. As part of zplay88's Know Your Customer (KYC) process, we may request copies of government-issued identity documents such as your Malaysian NRIC (MyKad), passport, or driver's licence, together with proof of address such as a utility bill or bank statement issued within the preceding three months. These documents are processed securely and retained only for the period required under our legal obligations.

2.2 Payment Instrument Data. zplay88 does not store full card numbers or online banking credentials on its servers. Payment processing is handled by certified third-party payment gateways. zplay88 retains only the transaction reference, amount, date, and associated payment method type (e.g., Touch n Go eWallet, Boost, Maybank FPX, CIMB FPX, Public Bank FPX) for reconciliation and audit purposes.

2.3 Sensitive Data. zplay88 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where specifically required for responsible gaming compliance (for example, where a Player voluntarily discloses health information in the context of requesting self-exclusion).

3.How We Use Your Data

zplay88 uses personal data collected through the Platform for the following purposes:

• Account Management: Creating and maintaining your zplay88 Account, verifying your identity at registration and during ongoing KYC reviews, and processing changes to your Account details.
• Service Delivery: Enabling you to access and participate in Games, processing deposits and withdrawals, delivering promotional credits, and providing customer support.
• Legal Compliance: Meeting obligations under applicable anti-money laundering (AML) regulations, responsible gaming requirements, and any reporting obligations to relevant authorities.
• Fraud Prevention & Security: Monitoring transaction patterns to detect and prevent fraud, money laundering, bonus abuse, and other prohibited conduct as defined in the zplay88 Terms & Conditions.
• Responsible Gaming: Monitoring gaming activity to identify potential problem gambling behaviour, implementing player-requested limits and self-exclusion, and delivering responsible gaming communications.
• Platform Improvement: Analysing aggregated usage data to improve Platform performance, game selection, user interface, and mobile app functionality.
• Marketing Communications: Sending promotional offers, bonus notifications, and Platform updates via email or SMS, where you have provided consent to receive such communications. You may opt out at any time.

4.Legal Basis for Processing

zplay88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and zplay88 — including operating your Account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML obligations, identity verification requirements, and responsible gaming mandates.
• Legitimate Interests: Processing that serves zplay88's legitimate business interests and does not override your fundamental privacy rights — including fraud detection, Platform security, and service analytics.
• Consent: Processing based on your explicit consent, principally in relation to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.Cookies & Tracking Technologies

5.1 The zplay88 Platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. Cookies are small text files stored on your device by your browser when you visit the Platform.

5.2 We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that maintain your logged-in state during a zplay88 session. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, currency display, and last-visited game section to improve your experience on return visits.
• Analytics Cookies: Collect anonymised data about how Players interact with the Platform — pages visited, time on page, game categories accessed — to help us improve the Platform. These are not linked to personally identifiable information.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional offers based on your Platform activity. You may decline these via the cookie preference centre accessible on the Platform.

5.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the zplay88 Platform, including the ability to log in and maintain an active session.

6.Data Sharing

6.1 zplay88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances.

6.2 We may share your personal data with third parties only in the following circumstances:

• Payment Processors: Certified payment gateway providers (including eWallet operators and bank FPX gateways) receive the minimum data necessary to process your financial transactions.
• Game Providers: Licensed software providers who supply the Games available on the Platform may receive anonymised session data required to deliver and audit game outcomes. Personal identity data is not shared with game providers.
• Identity Verification Services: Third-party KYC service providers may process copies of your identity documents on zplay88's behalf for the purpose of verifying your identity. These providers operate under strict data processing agreements.
• Legal & Regulatory Authorities: zplay88 will disclose personal data to law enforcement agencies, regulators, or courts where required to do so by applicable law, valid legal process, or in response to a lawful request.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of zplay88's business assets, personal data may be transferred as part of that transaction. Affected Players will be notified of any such transfer.

7.International Data Transfers

The zplay88 Platform is operated with infrastructure that may involve the processing of personal data in jurisdictions outside Malaysia. Where personal data is transferred internationally, zplay88 ensures that appropriate safeguards are in place to protect the data, including contractual clauses that impose data protection obligations on recipients equivalent to those applicable under international privacy standards.

8.Data Retention

zplay88 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by our operational and legal obligations:

• Account and identity data: Retained for the duration of your active Account and for a period of five (5) years following Account closure, to satisfy AML and KYC record-keeping requirements.
• Transaction records: Retained for seven (7) years from the date of the transaction, in accordance with standard financial record-keeping obligations.
• Support communications: Retained for two (2) years from the date of the communication, unless the subject matter of the communication necessitates longer retention (e.g., a dispute under active investigation).
• Marketing preference data: Retained until you withdraw consent or for one (1) year following last interaction with marketing communications, whichever is earlier.
• Technical and usage data: Typically anonymised or deleted within twelve (12) months of collection unless retained in anonymised aggregate form for analytics purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9.Your Privacy Rights

As a user of the zplay88 Platform, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data held about you by zplay88. Requests will be fulfilled within 30 days of receipt.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held about you. Minor corrections (such as phone number updates) can be made directly through your Account Settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to retention obligations under law. Deletion requests cannot be fulfilled where data is required for ongoing legal, regulatory, or dispute resolution purposes.
• Right to Restriction: You may request that zplay88 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to its processing.
• Right to Data Portability: Where processing is based on consent or contract, you may request a structured, machine-readable copy of your personal data for transfer to another controller.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, zplay88 will cease such communications within 5 business days.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the rights above, contact the zplay88 data team via live chat or at the email address listed in Section 13. We may require proof of identity before processing your request.

10.Security Measures

zplay88 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zplay88 Platform.
• Encryption of sensitive data fields (including identity document copies and financial reference data) at rest in our databases.
• Role-based access controls limiting internal access to personal data to authorised personnel who require it to perform their job functions.
• Regular internal and third-party security audits and penetration testing of the zplay88 Platform infrastructure.
• Intrusion detection and monitoring systems operating continuously to detect anomalous access patterns.
• Incident response procedures to manage and notify affected individuals of any data breach in accordance with applicable requirements.

While zplay88 takes all reasonable precautions to protect your data, no internet-based transmission is completely secure. You bear responsibility for maintaining the security of your zplay88 login credentials and for ensuring that your own device is protected against malware and unauthorised access.

11.Children's Privacy

The zplay88 Platform is strictly for persons aged 21 years and above. zplay88 does not knowingly collect personal data from any person under the age of 21. If we become aware that a registered Account belongs to an underage person, we will immediately suspend the Account, forfeit any associated balance, and delete the personal data associated with the Account. If you believe a minor has registered on the zplay88 Platform, please contact us immediately at the address in Section 13.

12.Policy Changes

zplay88 reserves the right to update this Privacy Policy from time to time. Where material changes are made that affect how we process your personal data, we will notify registered Players by email to their registered address and by a prominent notice posted on the zplay88 Platform prior to the changes taking effect. The effective date at the top of this Policy will be updated with each revision. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

13.Contact

For any queries, complaints, or requests relating to this Privacy Policy or the processing of your personal data by zplay88, please contact our data team through the following channels:

• Live Chat: Available 24/7 via the zplay88 Platform — average response time 3–5 minutes. English-speaking agents are available at all hours.
• Email: [email protected]

We aim to acknowledge all privacy-related requests within 3 business days and to provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.