Privacy Policy zplay8 – Your Personal Data Protection

Welcome to the zplay8 Privacy Policy page. This document is designed to give you a clear and comprehensive overview of how the zplay8 platform ("we", "the company", "the platform") handles your personal information as a registered member at zplay8.app.

We understand that your trust is the most valuable asset we hold. As such, all information you provide to us is handled with the highest level of care and responsibility. This Privacy Policy explains our practices for collecting, using, disclosing, and protecting your personal data, in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international standards.

By registering or using zplay8 services, you are deemed to have read, understood, and fully agreed to this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our platform and contact our support team for further assistance.

Zplay8 collects various types of information depending on your interactions with our platform. The data we collect is divided into several main categories:

A. Registration & Identity Information

B. Financial & Payment Information

C. Technical & Usage Data

D. Gaming Activity Data

The data we collect is used solely for legitimate, necessary purposes relevant to the operation of the zplay8 platform. The following are the primary purposes for which your data is used:

• Account Setup & Management: Registering your account, verifying your identity, managing login, and maintaining the security of your account at all times.
• Financial Transaction Processing: Processing deposits, withdrawals, and all other financial transactions accurately, securely, and promptly via your preferred payment method.
• KYC (Know Your Customer) Verification: Meeting legal and regulatory requirements related to identity verification, fraud prevention, and anti-money laundering.
• Customer Support: Providing effective technical support and customer service whenever you reach us via live chat or email.
• Service Improvement: Analyzing usage patterns to improve platform design, technical performance, and various game features.
• Marketing Communications: Sending information about promotions, bonuses, and the latest offers — only to members who have consented to receive such communications.
• Legal Compliance: Fulfilling legal obligations, regulations, and requests from competent authorities in accordance with Malaysian law.
• Fraud Detection: Monitoring account activity to detect and prevent any form of fraud, misuse, or activity that violates our Terms and Conditions.

Zplay8 understands that your trust depends on how we handle your information when third parties are involved. We disclose your personal data only in the following situations:

• Integrated Payment Providers: Transaction information that must be shared with payment service providers such as DuitNow, FPX, Touch 'n Go eWallet, GrabPay, and Boost to process your transactions. All such providers are bound by strict confidentiality agreements.
• Technical Service Providers: Companies that help us operate the platform's technical infrastructure — such as cloud services, security monitoring, and analytics — strictly on a need-to-know basis and subject to data protection agreements.
• Game Providers: Minimal game data required is shared with third-party game software providers to enable you to access and play their games on our platform.
• Regulatory Authorities & Law Enforcement: Where required by law, court order, or official request from a competent law enforcement agency in Malaysia.
• Business Transfer: In the event of a merger, acquisition, or sale of zplay8 assets, user data may be transferred as part of that transaction, with prior notice provided to you.

The security of your personal information is zplay8's top priority. We continuously invest in information security technology and best practices to ensure your data is always protected against unauthorized access, loss, misuse, or improper disclosure.

The comprehensive security measures we employ include:

• 256-bit SSL/TLS Encryption: All communication between your device and zplay8 servers is encrypted using the same banking-grade industry encryption protocol, ensuring no third party can intercept or read your data in transit.
• Secure Password Storage: Your account password is never stored in plain text — it is protected using a one-way cryptographic hashing algorithm that cannot be reversed.
• Two-Factor Authentication (2FA): We provide 2FA for all member accounts as an additional security layer that is strongly recommended to activate.
• 24/7 Security Monitoring: Our dedicated security team monitors systems around the clock to detect any suspicious activity or security threats in real time.
• Internal Access Control: Access to members' personal data within our organisation is strictly limited and granted only to staff who genuinely require it for their specific duties.
• Data Segregation: Financial data and personal information are stored in separate systems with layered access controls to minimise the risk of exposure in the event of a security incident.

Zplay8 uses cookies and similar tracking technologies to enhance the user experience on our platform. Cookies are small text files stored on your device when you browse our website.

You can manage your cookie settings through your web browser at any time. Please note that disabling certain cookies may affect the functionality and user experience of the zplay8 platform.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia and zplay8's policies, you have certain rights regarding the personal data we hold about you. We fully respect and support the exercise of these rights:

Zplay8 retains your personal data only for as long as necessary for the purposes stated in this policy, or as required by applicable laws and regulations. The following are our general data retention period guidelines:

• Active Account Data: Retained for the duration of your active membership at zplay8.
• Financial Transaction Records: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's accounting and tax legal requirements.
• KYC & Identity Verification Data: Retained for a minimum of 5 years after account closure or the end of the business relationship, in line with anti-money laundering (AML) requirements.
• Support Communication Logs: Retained for 2 years for quality control and dispute resolution purposes.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications.
• Technical & Log Data: Retained for 90 days for security and technical troubleshooting purposes.

Once the designated retention period has ended, your data will be securely deleted or anonymised in accordance with industry best practices in data lifecycle management.

As a responsible online gaming platform, zplay8 conducts a comprehensive Know Your Customer (KYC) process. This is a mandatory requirement under Malaysia's anti-money laundering and counter-terrorism financing laws.

During the KYC process, you may be asked to submit the following documents:

• Copy of Malaysian identity card (MyKad) or valid passport
• Proof of current address such as a utility bill or recent bank statement (not older than 3 months)
• Selfie with identity document (for biometric verification)
• Bank statement or proof of the payment method used for deposits

All documents submitted for KYC purposes are handled with the highest level of confidentiality. They are stored in a secure environment with strict access controls and accessed only by specially trained compliance staff for this purpose.

Zplay8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, new legal requirements, or platform improvements. Each new version will include the latest amendment date at the top of this document.

For material or significant amendments, we will notify you via:

• In-platform notification when you log in to your account
• Email to the address registered on your account
• A prominent notice displayed on the platform's home page for at least 14 days before the amendments take effect

Continued use of the zplay8 platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request the deletion of your personal data in accordance with the procedures outlined in Section 7.