Privacy Policy zpay88 — Your Personal Data Protection

When you register and use the zpay88 platform, we collect various types of personal information for the purposes stated in this Privacy Policy. This collection is necessary to enable us to provide you with a secure, seamless and high-quality service.

Information you provide directly:

• Full name, national identity card number (MyKad) or passport number.
• Active mobile number and email address.
• Date of birth for age verification purposes (18 years and above).
• Bank account details and e-wallet account numbers (Touch 'n Go, GrabPay) for processing financial transactions.
• KYC documents such as identity card photos and selfies taken during the verification process.

Information collected automatically:

• IP address, device type, operating system and web browser.
• Session log data such as login time, logout time and active session duration.
• Gaming history, wagering activity, and financial transaction records.
• Geolocation data at country/state level for legal compliance purposes.
• Cookie data and similar tracking technologies (see Section 05).

Zpay88 uses collected information solely for the following lawful and stated purposes. We will not use your data beyond the scope agreed upon at registration or as outlined in this policy.

You may withdraw consent to receive marketing communications at any time by contacting our support team. Withdrawing consent will not affect your core account services.

Zpay88 understands that your privacy is a trust that must be carefully upheld. As our firm policy, your personal information will not be sold, rented, or traded to any external party for commercial purposes.

However, there are limited situations where we need to share your information with certain parties, all subject to strict confidentiality protections:

• Payment Service Providers — Transaction information is shared with licensed payment processors (FPX, Touch 'n Go, GrabPay) to facilitate deposits and withdrawals securely.
• Game Providers — Minimal game session data is shared with our gaming software providers to ensure game integrity.
• Law Enforcement Authorities — zpay88 will disclose information if required by a court order, warrant, or directive from a lawful authority in Malaysia.
• Auditors & Professional Consultants — Within a limited scope and subject to binding confidentiality agreements.

Protecting your personal data is not merely a legal obligation for zpay88 — it is a core commitment we take seriously. Our platform is safeguarded by multiple layers of security that work simultaneously to counter modern cyber threats.

The technical security measures we implement include:

• Data encryption in transit using TLS 1.3 and SSL 256-bit protocols.
• Data encryption at rest using AES-256 for all sensitive information.
• Two-Factor Authentication (2FA) is available for all member accounts.
• Intrusion detection system (IDS/IPS) active 24 hours a day.
• Regular security testing (penetration testing) conducted by independent auditors.
• Role-based access control (RBAC) to restrict staff access to member data.

Zpay88 uses cookies and similar tracking technologies to ensure the platform operates optimally and to deliver a personalised experience. Cookies are small text files stored on your device when you browse our website.

Types of cookies we use:

• Essential Cookies — Required for core platform functions such as login sessions, bonus tracking, and security. Cannot be disabled.
• Performance Cookies — Collects aggregated data on how users interact with the platform for improvement purposes.
• Functional Cookies — Stores your preferences such as language, display settings, and favourite game selections.
• Analytics Cookies — Helps us understand platform usage patterns to improve service quality.

You can manage or block cookies through your web browser settings. Please note that disabling essential cookies may affect certain functions of the zpay88 platform.

Zpay88 only retains your personal data for as long as necessary to fulfil the purposes stated in this Privacy Policy or as required by applicable Malaysian law.

• Active account data — Retained for the duration your account remains active on zpay88.
• Financial transaction records — Retained for 7 years after the transaction date, in compliance with accounting and AML legal requirements.
• KYC Documents — Retained for 5 years after account closure in accordance with PDPA and anti-money laundering guidelines.
• Support communication logs — Retained for 2 years for reference and dispute resolution purposes.
• Analytics cookie data — Automatically deleted after 13 months.

Once the specified retention period expires, your data will be securely deleted using methods that comply with information security standards.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data held by zpay88:

To exercise any of the above rights, please contact our Data Protection team via email or Live Chat. We will process your request within 21 working days as stipulated by the PDPA. Please note that these rights are subject to certain exceptions under the law, such as financial record retention obligations.

Zpay88 is a platform intended exclusively for individuals aged 18 and above. We do not knowingly collect, process, or store any personal information from minors.

Should we discover that we have inadvertently collected personal data from an individual under the age of 18, we will take immediate action to delete that data and close the account in question without prior notice.

Zpay88 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or technological developments. Any material amendments will be communicated to members via:

• A prominent notice on the zpay88 platform homepage for a minimum of 14 days.
• Email notifications to all active registered members.
• Update the "Updated" date at the top of this page.

Your continued use of the zpay88 platform after any amendments take effect will be considered your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns or wish to exercise your data protection rights, the zpay88 Data Protection Officer (DPO) team is ready to assist you.