Privacy Policy zplay8

1. Information We Collect

zplay8 collects various categories of information in the process of providing safe and responsible online gambling services. The following are the types of information we collect and the purposes for each:

For anti-money laundering (AML) compliance and know-your-customer (KYC) purposes, we may require additional supporting documents such as a copy of your MyKad, bank statement or proof of address. All submitted documents are stored with the highest encryption and are only accessible by authorised staff.

2. How We Use Your Information

Every piece of information we collect is used for legitimate, specific purposes that are consistent with applicable data protection laws. The following are the main purposes for which zplay8 uses your information:

• Processing account registration, identity verification and age verification to ensure only users aged 21 and above can use the platform.
• Processing deposit and withdrawal transactions through supported payment methods, including Touch 'n Go eWallet, DuitNow, FPX and cryptocurrency.
• Providing 24/7 customer support via live chat and email in Malay and English.
• Sending important notifications related to your account, transactions and service updates.
• Detecting and preventing fraud, money laundering, and any activity that violates the terms of service.
• Complying with legal obligations and regulatory requirements under our international licensing.
• Improving our platform, user experience and services based on analysis of data that does not identify individuals.
• Sending relevant promotional information and bonuses — you may opt out of marketing communications at any time.

3. Disclosure to Third Parties

zplay8 does not disclose your personal information to any third party except in the following limited and necessary situations:

• Payment Service Providers: Information required to process transactions via Touch 'n Go eWallet, DuitNow, FPX and cryptocurrency payment networks is shared with the relevant payment processors solely for the purpose of completing those transactions.
• Game Technology Providers: Third-party game developers may receive anonymous game session data for technical purposes and RNG (Random Number Generator) compliance.
• Regulatory Authorities and Law Enforcement: We comply with any lawful requests from competent authorities, including our international licensing body, for legal compliance purposes.
• Identity Verification Services: Recognised third-party KYC and AML providers may receive identity documents for verification purposes, subject to strict confidentiality agreements.

All third parties we work with are required to comply with data security standards equivalent to our own policy. We do not share your information for any third-party marketing purposes.

4. Information Security Measures

The security of your personal information is a top priority for zplay8. We implement multiple layers of technical and organisational protection:

• 256-bit SSL/TLS data encryption for all communications between your device and our servers.
• Password storage using a one-way hashing algorithm that cannot be reversed.
• Two-factor authentication (2FA) available for all user accounts.
• Continuous security monitoring and periodic penetration testing by internal and external security teams.
• Role-based access controls for internal staff — only those who genuinely need the data to carry out their duties are granted access.
• Clear incident response procedures to handle any data breaches quickly and transparently.

5. Cookies and Tracking Technologies

The zplay8 platform uses cookies and similar tracking technologies to improve your experience. Cookies are small text files stored on your device when you visit our website. There are several types of cookies we use:

• Essential Cookies: Required for basic platform functions such as login verification and session security. Cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect anonymous information about how users interact with our platform to help us improve our services.
• Functional Cookies: Save your preferences such as language, display theme, and account settings to provide a more personalised experience.
• Analytics Cookies: Help us understand traffic, usage patterns, and the effectiveness of platform features on an aggregated and anonymous basis.

You can manage your cookie settings through your web browser at any time. However, disabling essential cookies may prevent you from using some platform functions fully.

6. Data Storage and Transfer

Your personal information is stored in secure, certified data centres. As a platform operating under international licensing, your data may be processed and stored at locations outside Malaysia. Whenever data is transferred across borders, we ensure protection equivalent to the standards set by Malaysia's Personal Data Protection Act (PDPA) through:

• Legally binding data transfer agreements with all partners who process your data.
• Use of recognised standard contractual clauses for international data transfers.
• Regular security audits of all data storage locations.

7. Your Rights as a User

As a zplay8 platform user, you have certain rights regarding your personal information. We respect these rights and provide straightforward channels for you to exercise them:

8. Privacy in Financial Transactions

We understand that financial matters are highly sensitive. Here is how we handle your financial information specifically:

• Payment details such as your Touch 'n Go eWallet and DuitNow accounts are stored with additional encryption and used only to process transactions you initiate.
• Deposit and withdrawal amounts are never disclosed to third parties except where required for AML compliance or a valid court order.
• Your transaction history is accessible only by you through your account, and by authorised staff for support or fraud investigation purposes.
• Transactions involving cryptocurrency (USDT, BTC, ETH) are handled through fully encrypted networks.

9. Data Retention Period

zplay8 retains your personal information for as long as your account is active and for the period required after account closure for legal compliance and resolution of any disputes that may arise. In general:

• Account and identity data: Retained for the duration the account is active plus a minimum of five (5) years after account closure, in line with AML and regulatory requirements.
• Financial transaction records: Retained for a minimum of seven (7) years in accordance with international financial law requirements.
• Customer support communication logs: Retained for two (2) years for service quality and complaint resolution purposes.
• Cookie and technical data: Retained according to the period specified in the cookie settings, typically between one (1) session and two (2) years.

When data is no longer needed, it will be securely deleted or anonymised using recognised procedures.

10. Amendments to This Privacy Policy

zplay8 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Where there are significant changes, we will provide appropriate notice through:

• In-platform notifications when you log in to your account.
• Email to the email address registered to your account.
• A prominent notice displayed on our website's main page.

The "Updated" date shown at the top of this document reflects the date of the latest version. Continued use of the zplay8 platform after any amendments is taken as your acceptance of the updated Privacy Policy.