Privacy Policy

This Privacy Policy (hereinafter "the Policy") is published by zpay88 (hereinafter "zpay88", "we", "us", or "our") and applies to all personal data collected from users (hereinafter "Player", "User", or "you") of the zpay88 online casino and sports betting platform accessible at https://zpay88.cam and all associated subdomains, mobile interfaces, and digital services.

This Policy is intended to inform you clearly and transparently about the types of personal information we collect, the purposes for which we process that information, the circumstances in which we may share it with third parties, the security measures we apply to protect it, and the rights you hold in respect of your own data.

By registering an account, depositing funds, or otherwise using the zpay88 platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy.

The following definitions apply throughout this Privacy Policy:

zpay88 collects personal data that is necessary and proportionate to the operation of a secure and compliant online gaming platform. The categories of personal data we may collect include:

Account Registration Data:

Identity Verification (KYC) Data:

Financial Transaction Data:

Gameplay & Behavioural Data:

Technical & Device Data:

Communications Data:

zpay88 collects personal data through the following channels:

• Direct Provision: Information you provide when registering an account, completing KYC verification, contacting support, or filling in forms on the platform.
• Automated Collection: Technical and behavioural data collected automatically as you interact with the platform, including via cookies, server logs, and analytics tools.
• Third-Party Verification Services: Identity and age verification data provided by licensed KYC verification service providers engaged by zpay88 to fulfil regulatory obligations.
• Payment Processors: Transaction confirmation data shared by payment providers including Touch 'n Go eWallet, DuitNow, FPX, and other integrated Malaysian payment services.
• Fraud Detection Services: Data signals received from fraud prevention and anti-money laundering (AML) screening services used to protect the platform and its users.

zpay88 processes your personal data for the following specified purposes:

1. Account Management: To register, maintain, and administer your zpay88 account, including processing login authentication and account settings.
2. Identity & Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required by our Terms and applicable compliance obligations.
3. Financial Transactions: To process deposits and withdrawals in MYR via your chosen payment method, maintain accurate financial records, and detect fraudulent or suspicious transaction patterns.
4. Regulatory Compliance: To fulfil obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and financial reporting requirements.
5. Customer Support: To respond to your queries, resolve disputes, and manage support communications via live chat and email.
6. Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance, security, and usability of the zpay88 platform.
7. Responsible Gambling: To monitor gaming activity and apply responsible gambling controls, including deposit limits, session alerts, and self-exclusion tools, in accordance with our Responsible Gambling Policy.
8. Promotional Communications: Where you have provided consent or where permitted under applicable law, to send you relevant promotions, bonus offers, and platform updates. You may opt out at any time.
9. Legal Obligations: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms and Conditions.

zpay88 processes your personal data on the following legal grounds, depending on the purpose of processing:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms and Conditions, including account management and transaction processing.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML, KYC, and financial reporting obligations.
• Legitimate Interests: Processing carried out in pursuit of zpay88's legitimate business interests, including fraud prevention, platform security, and service improvement, provided such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — for example, for the sending of promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

zpay88 does not sell, rent, or commercially exploit your personal data to any third party. We may, however, share specific categories of your data with the following categories of recipients for the purposes described in this Policy:

• Payment Service Providers: Transaction data shared with payment processors including Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Connect, solely to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Identity documents shared with licensed KYC service providers for the sole purpose of verifying your identity and age.
• Fraud Prevention & AML Services: Transaction and behavioural data shared with fraud detection and anti-money laundering screening services to protect the platform and its users from financial crime.
• Cloud Infrastructure Providers: Data stored and processed on secure cloud servers provided by reputable infrastructure providers operating under contractual data processing agreements with zpay88.
• Legal & Regulatory Authorities: Personal data disclosed to regulatory bodies, law enforcement agencies, or courts where required by applicable law, legal process, or to protect the rights and safety of zpay88 and its users.
• Professional Advisors: Legal, financial, or compliance advisors engaged by zpay88, subject to appropriate confidentiality obligations.

All third-party data processors engaged by zpay88 are required to process personal data only in accordance with zpay88's instructions and under data processing agreements consistent with applicable data protection standards.

zpay88 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations, whichever is longer. Our general retention approach is as follows:

• Active Account Data: Retained for the duration of your account and for a period of up to five (5) years following account closure, in line with standard financial record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under applicable anti-money laundering regulations.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Retained for up to three (3) years following resolution of the relevant support interaction.
• Marketing Preferences: Retained until you withdraw consent, with opt-out records maintained to respect your preference.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

zpay88 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zpay88 platform.
• Encrypted storage of passwords — passwords are never stored in plaintext.
• Restricted access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular independent security assessments and penetration testing of the platform infrastructure.
• Two-factor authentication options available to Players for additional account security.
• Secure data centres with physical and logical access controls operated by our infrastructure partners.

zpay88 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device to support the operation and improvement of our services. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential to the operation of the platform — these enable core functions such as secure login session management, account authentication, and fraud prevention. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences and settings — for example, your preferred language, display settings, or responsible gambling limit configurations.
• Performance & Analytics Cookies: Used to collect aggregate, anonymised data about how Players interact with the platform, enabling us to identify performance issues and improve user experience.

zpay88 does not use third-party advertising cookies or cross-site behavioural tracking for the purpose of serving targeted advertisements. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent core platform functions from operating correctly.

As a registered Player of zpay88, you hold the following rights in respect of your personal data. Requests to exercise these rights may be submitted to our support team via the contact details at the end of this Policy.

zpay88 aims to respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days with prior notification to you.

The zpay88 platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process for all registered Players.

If zpay88 discovers or is notified that personal data has been collected from a Player who is under the minimum age, we will immediately close the relevant account, delete or anonymise all associated personal data to the extent permitted by applicable legal obligations, and return any real money balances in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor under your care has registered on the zpay88 platform, please contact our support team immediately via the details below so that appropriate action can be taken without delay.

The zpay88 platform may reference or link to third-party services in the course of providing its services — for example, payment providers such as Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, and Hong Leong Connect. These third-party services operate under their own independent privacy policies, which we encourage you to review separately.

zpay88 is not responsible for the privacy practices, security standards, or content of any third-party services. Our responsibility extends only to the data we share with those providers for the specific processing purposes described in this Policy, and we contractually require all data processors to handle such data in accordance with applicable data protection standards.

zpay88 reserves the right to update or revise this Privacy Policy at any time in response to changes in applicable law, regulatory requirements, platform functionality, or our data processing practices.

When material changes are made to this Policy, zpay88 will provide reasonable advance notice to registered Players via email or on-platform notification. The date of the most recent revision is displayed at the top of this page. Continued use of the zpay88 platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

We encourage all Players to review this Policy periodically to remain informed about how zpay88 protects and manages their personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by zpay88, please contact us through any of the following channels. All privacy-related inquiries are handled by our support team in accordance with the timelines set out in this Policy.