zplay8 Privacy Policy

zplay8 (operating under the domain zplay8.cam) is an online gaming platform serving Malaysian players with sports betting, live casino tables, video slots, fishing games, and related services. This Privacy Policy governs how zplay8 collects, processes, stores, shares, and protects personal data relating to users, visitors, and prospective registrants.

This policy applies to all data interactions with zplay8, whether through the main website, any mobile interface, live chat, email, or other communication channel. It should be read together with the zplay8 Terms & Conditions and the Responsible Gambling policy, both of which contain additional provisions relevant to data subjects.

zplay8 is committed to handling all personal information with honesty, care, and proportionality. We operate under international gaming licensing standards, which carry accompanying data protection obligations. Where applicable law imposes specific requirements that differ from those described in this policy, the stricter standard will prevail.

For the purposes of this Privacy Policy, the following expressions carry the meanings set out below:

• Personal Data means any information that identifies or could reasonably identify a living individual, directly or in combination with other information held by or reasonably available to zplay8.
• Processing means any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, and deletion.
• Data Subject means the individual to whom personal data relates — in practice, a zplay8 user or prospective user.
• Data Controller means zplay8, the entity that determines the purposes and means of processing personal data.
• KYC means Know Your Customer verification, the process by which zplay8 confirms the identity and eligibility of account holders.
• Cookies means small text files placed on a user's device to store preferences, session information, and analytical signals.
• Third-Party Service Provider means an external organisation engaged by zplay8 to assist in delivering the platform, subject to confidentiality and data protection obligations.

zplay8 collects personal data through direct registration inputs, account activity, payment transactions, customer support interactions, KYC submissions, and automated technical signals. The categories collected are described in the table below.

zplay8 does not intentionally collect special categories of data (such as health, biometric, or religious information) unless directly relevant to a responsible gambling concern raised by or about the user. Biometric verification, where used for identity authentication, is processed solely for that purpose and is not retained beyond the verification process.

zplay8 processes personal data for the following clearly defined purposes:

• Account registration and management: creating, maintaining, and securing your zplay8 account, including credential management and account preference settings.
• Identity verification and KYC compliance: confirming that account holders are real individuals aged 21 or above, with legitimate payment instruments, as required under our international gaming licence.
• Payment processing: facilitating MYR deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, and digital currencies, and processing authorised withdrawal requests to verified payment accounts.
• Fraud prevention and security: identifying and preventing fraudulent transactions, chargeback abuse, money laundering, account takeover, promotional abuse, and other activities that harm players or the platform.
• Responsible gambling: administering deposit limits, session reminders, cooling-off periods, self-exclusion requests, and flagging activity patterns that may indicate problem gambling.
• Customer support: responding to queries, resolving disputes, correcting account issues, and handling complaints submitted by Malaysian players and others.
• Platform improvement: analysing aggregate and anonymised usage data to improve game performance, payment reliability, website navigation, and overall user experience.
• Legal compliance: retaining records as required by applicable licensing conditions, anti-money laundering obligations, and dispute resolution processes.
• Operational communications: sending essential service notices about security, payment outcomes, account restrictions, policy updates, and verification requests.

zplay8 processes personal data on the following lawful bases, applied to the relevant processing activities described in Section 4:

• Contractual necessity: processing required to fulfil the agreement between zplay8 and the user, including account creation, MYR payment transactions, wager settlement, withdrawal execution, and KYC verification.
• Legal obligation: processing necessary to comply with applicable licensing conditions, anti-money laundering requirements, financial record-keeping obligations, and lawful requests from regulatory bodies.
• Legitimate interests: processing for fraud prevention, platform security, responsible gambling monitoring, dispute investigation, and service quality improvement, where such interests are not overridden by user rights.
• Consent: processing for optional communications such as promotional updates and marketing, where the user has provided explicit consent and may withdraw it at any time through account settings or by contacting support.

zplay8 does not sell, rent, or commercially transfer personal data to external parties for their independent marketing, advertising, or commercial use. Personal data is shared only in the limited circumstances described below, and always subject to confidentiality obligations and appropriate data protection requirements.

• Technology and infrastructure providers: cloud hosting, database management, server security, and content delivery partners who process data strictly to deliver the zplay8 platform and are bound by data processing agreements.
• Payment processors and financial institutions: Malaysian e-wallet operators, banking partners, digital currency networks, and fraud-screening services involved in processing deposits and withdrawals, each subject to their own applicable financial regulations.
• KYC and identity verification services: external verification providers that assist zplay8 in confirming the identity, age, and document authenticity of users during the account verification process.
• Customer support platforms: live chat, ticketing, and communication tools used to deliver 24/7 support in English, Bahasa Melayu, and Mandarin, contracted under appropriate service terms.
• Analytics providers: services that generate anonymised or aggregated platform usage reports — no individually identifiable data is used for analytics purposes without prior consent.
• Legal and regulatory authorities: licensed operators may be required to disclose specific data to law enforcement agencies, gaming regulators, financial intelligence units, or courts when subject to a valid legal order or compliance obligation.

Where personal data is processed outside Malaysia, zplay8 applies reasonable measures to ensure an adequate standard of protection is maintained consistent with the safeguards described in this policy.

Processing financial data is integral to the zplay8 service. When you deposit MYR through Touch 'n Go eWallet, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong, Boost, GrabPay, or a supported digital currency such as USDT TRC20, Bitcoin, or Ethereum, the transaction details — including the amount, payment method, and reference number — are recorded in your account history and retained for the periods described in Section 9.

Full card or bank credential details are handled directly by the payment provider and are not stored on zplay8 servers. zplay8 may record the last four digits of a payment instrument or a payment reference number for reconciliation and fraud-screening purposes only.

zplay8 uses cookies and similar technologies to operate the platform, maintain user sessions, prevent fraud, and understand how users interact with the website. The principal categories of cookies used are:

• Strictly necessary cookies: required for the website to function correctly, including session management, login state, payment flow continuity, and security features. These cannot be disabled without impairing core functionality.
• Functional cookies: store non-essential preferences such as language choice, display settings, and previously selected payment methods, to provide a smoother experience on return visits.
• Analytical cookies: collect anonymised or aggregated data about page visits, feature usage, and navigation paths, used solely to improve platform performance and user experience.
• Security cookies: assist in detecting and preventing unusual access patterns, credential stuffing, and automated abuse that could compromise player accounts.

zplay8 does not use advertising cookies or behavioural tracking technologies that share your data with third-party advertising networks. Cookie preferences for non-essential categories may be managed through browser settings. Disabling strictly necessary cookies will affect your ability to use the platform.

zplay8 retains personal data only for as long as reasonably necessary to fulfil the original purpose of collection, comply with applicable legal and licensing obligations, resolve disputes, enforce agreements, and maintain responsible gambling records.

• Active account data is retained throughout the period an account remains open and active.
• KYC and identity verification documents are retained for the period required by applicable anti-money laundering and licensing requirements following account closure, which typically ranges from five to seven years depending on jurisdiction.
• Transaction records, including MYR deposit and withdrawal history, are retained for the same compliance period to support financial audit, dispute resolution, and regulatory review.
• Customer support communications are retained for a reasonable period to assist with ongoing or future queries and to evidence the standard of service provided.
• Responsible gambling records, including self-exclusion requests and limit settings, are retained for sufficient time to enforce those controls even if an account is subsequently closed.
• Anonymised analytical data may be retained indefinitely, as it cannot be used to identify individual users.

Following the applicable retention period, personal data is securely deleted or anonymised. Users may request early deletion in accordance with their rights described in Section 11, subject to the overriding obligations noted above.

zplay8 applies industry-standard technical and organisational security measures to protect personal data from unauthorised access, accidental loss, corruption, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between users and the zplay8 platform;
• encrypted storage for sensitive personal and financial records;
• role-based access controls limiting staff access to personal data strictly to what is necessary for their function;
• two-factor authentication and privileged access management for internal systems;
• regular independent penetration testing and vulnerability assessments; and
• incident response procedures to detect, contain, and notify relevant parties of material data security events.

No internet transmission or electronic storage system can be guaranteed completely secure. Users also bear responsibility for protecting their account credentials, devices, and personal networks. Any suspected unauthorised access to a zplay8 account should be reported to support immediately so that the account can be reviewed and secured.

As a data subject, you have meaningful rights over how your personal information is handled by zplay8. These rights may be subject to verification of identity and to limitations where legal retention or security obligations take precedence.

To exercise any of these rights, contact zplay8 support at [email protected] (displayed as plain text — not a clickable link). Please include your registered username and a description of your request. Identity verification will be required before personal data is disclosed or modified.

zplay8 is strictly an adults-only service. No person under the age of 21 may register, deposit, wager, or otherwise use the platform. zplay8 does not knowingly collect personal data from individuals under 21 years of age. If an account is found to belong to a minor, it will be immediately closed, any balance will be returned through appropriate channels, and the associated data will be handled in accordance with applicable legal requirements.

Parents and guardians who believe a minor has registered on zplay8 are encouraged to contact support at [email protected] (plain text — not clickable) so that the matter can be investigated and resolved promptly. Parental control software tools are available separately from internet service providers and third-party organisations.

zplay8 may update this Privacy Policy to reflect changes in data processing practices, platform functionality, payment methods, applicable legal obligations, or regulatory requirements. The effective date at the top of the policy indicates when the current version took effect.

Where changes are material — meaning they meaningfully affect how personal data is collected, used, or shared — zplay8 will provide appropriate notice through the website prior to the changes taking effect. This may include an on-screen notification, a banner, or an account communication, depending on the nature of the change.

Continued use of zplay8 after an updated Privacy Policy takes effect constitutes acknowledgement of and agreement to the revised terms. Users who do not accept a material change should contact support to discuss their options, including account closure, before the effective date.

If you have a question about this Privacy Policy, wish to exercise a data right, would like to raise a privacy concern, or need to report a suspected data security incident, please contact the zplay8 support team using any of the following channels:

• Email: [email protected] — plain text address, not a clickable link.
• Live chat: available 24/7 in English, Bahasa Melayu, and Mandarin through the website interface.
• WhatsApp support: accessible through the contact details provided when logged into your account.

We aim to acknowledge privacy requests within five business days and to resolve them within thirty days, subject to complexity and identity verification requirements. Where a request cannot be fulfilled within thirty days, we will notify you with an expected timeline and the reason for the delay.