Privacy Policy zalo88 – Malaysia Player Data Protection

Zalo88 collects your personal information for legitimate, clearly stated purposes. We only collect information that is genuinely necessary to provide a safe, transparent, and high-quality experience to every player.

Information You Provide Directly

• Registration information: Full name, date of birth, email address, phone number, and password.
• KYC verification documents: A copy of your national ID, passport, or driving licence for identity verification purposes.
• Financial information: Bank account number, e-wallet details, and deposit and withdrawal transaction records.
• Profile information: Username, language preferences, and personal account settings.

Automatically Collected Information

• Technical data: IP address, browser type, operating system, and device type.
• Usage data: Pages visited, session duration, games played, and betting patterns.
• Location data: General location based on IP address for regional compliance purposes.
• Cookie data: Session preferences, language settings, and authentication tokens.

Zalo88 uses collected personal information solely for legitimate purposes declared at the time of collection. We do not use your data for unrelated purposes without first obtaining your consent.

Primary Purpose of Data Use

• To create and manage player accounts and verify identity through the KYC process.
• To securely process deposits, withdrawals, and all financial transactions.
• To provide effective customer support and resolve any technical or financial issues.
• To detect and prevent fraud, money laundering, and any suspicious activity.
• To send important notifications related to your account, transactions, and promotions you have opted into.
• To improve the platform, user interface, and overall gaming experience.
• To comply with applicable legal and regulatory obligations.

If zalo88 wishes to use your data for direct marketing or any new purpose not mentioned above, you will be notified and asked to provide consent separately.

Zalo88 firmly holds the principle that your personal data belongs to you. We do not sell, rent, or disclose players' personal information to third parties for their own commercial purposes. However, there are limited situations where data sharing is necessary to deliver our services.

Situations Where Data May Be Shared

• Payment processors: Transaction details required to process deposits and withdrawals via FPX, DuitNow, and supported e-wallets.
• Technical service providers: Server hosting and cloud service providers that help operate the platform infrastructure, subject to strict confidentiality agreements.
• Legal authorities: When required by Malaysian law or a valid court order, we will comply with such requests.
• Anti-fraud service providers: Data required to detect and prevent fraudulent activity and money laundering.

All third parties receiving zalo88 player data are bound by strict data protection agreements and are only permitted to use that information for the stated purposes.

Zalo88 invests seriously in security infrastructure to ensure your personal data is always protected against both internal and external threats. Our security systems are designed with a multi-layered approach so that even if one layer is compromised, the remaining layers continue to safeguard your data.

Security Layers We Use

• Encryption of data in transit: SSL/TLS 256-bit for all communications between browser and server.
• Encryption of data at rest: Passwords and sensitive information are stored in an irreversible encrypted format.
• Two-Factor Authentication (2FA): An additional security layer for login and withdrawals.
• 24/7 Monitoring: A round-the-clock threat detection system that identifies suspicious activity at all times.
• Regular security audits: Independent security audits conducted every quarter.
• Data segregation: Player data is segregated by sensitivity category with separate access controls.

While we take all reasonable steps to protect your data, no system can be guaranteed 100% secure. In the event of a security incident affecting your data, zalo88 will notify you within 72 hours and take immediate remedial action.

Zalo88 uses cookies and similar tracking technologies to enhance the user experience and ensure the platform functions smoothly. Cookies are small files stored on your device when you visit our website.

Types of Cookies We Use

• Essential cookies: Required for core platform functions such as login, account use, and session security. These cookies cannot be disabled.
• Preference cookies: To save your preferences such as language, display settings, and account settings for a more personalized experience.
• Analytics cookies: To help us understand how players use the platform so we can make continuous improvements.
• Security cookies: To detect suspicious activity and protect your account from unauthorized access.

You can manage cookie settings through your web browser. However, disabling essential cookies may affect certain platform features. Analytics and preference cookies can be disabled without impacting core functionality.

Zalo88 respects your rights over your personal data. We provide straightforward mechanisms for you to exercise these rights at any time through your account settings or by contacting our support team.

Zalo88 retains your personal information only for as long as necessary to fulfil the stated purposes of collection, or for the period required by applicable Malaysian law.

• Active account data: Retained for the duration of the active account and up to 5 years after account closure for audit purposes.
• Financial transaction records: Retained for a minimum of 7 years in compliance with anti-money laundering legislation (AMLA).
• KYC documents: Retained for 5 years after the business relationship ends.
• Support communication logs: Retained for 2 years from the date of interaction.
• Analytics data (anonymised): Retained indefinitely in aggregated and anonymised form.

Once the retention period expires, your data will be securely deleted or anonymised so it can no longer be linked to your identity.

Zalo88 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Any material amendments will be communicated to registered players via email or in-platform notification at least 14 days before the changes take effect.

We encourage you to review this page regularly to stay informed about how we manage your personal data. The "Updated" date at the top of this page indicates when the latest revision was made.

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, the zalo88 privacy team is ready to assist through the following channels:

• In-platform Live Chat (response within 2 minutes)
• Email: [email protected] (plain text — please copy and paste into your email client)
• Support hours: 24 hours a day, 7 days a week