Privacy Policy Zalo88 –
Malaysia Player Data Protection

1Introduction & Scope of This Privacy Policy

This Privacy Policy is issued by Zalo88 and applies to all users who register, browse, or use our platform at zalo88.onl, including our official mobile app for iOS and Android. By using Zalo88's services, you agree to the practices described in this document.

Zalo88 acts as the data controller for all personal information you provide to us. We understand that your trust is our most valuable asset, and we take this responsibility very seriously. This policy transparently explains what data we collect, why we need it, how it is used, and your rights as the owner of that data.

We encourage you to read this document in full so you have a complete understanding of how your personal information is handled. If any section is unclear, our customer support team is available to assist you at any time.

2Information We Collect

Zalo88 only collects information that is strictly necessary to provide a safe, seamless, and responsible service to players in Malaysia. The following are the categories of information we collect:

We do not collect sensitive information such as medical data, political views, or religious beliefs. All data collection is conducted transparently and with clear notice to you.

3How We Use Your Data

Every piece of information collected by zalo88 has a clear and legitimate purpose. We do not use your data for any other purpose without first obtaining your consent. The primary purposes for data use are as follows:

• Identity verification and KYC: Ensuring you meet the minimum age requirement of 18 years and verifying your identity before financial transactions are processed.
• Payment processing: Securely processing deposits and withdrawals via DuitNow, FPX, Touch 'n Go, GrabPay, and local banking methods.
• Account management: Keeping your account secure, processing responsible gaming limit settings, and managing your communication preferences.
• Fraud prevention and anti-money laundering: Monitoring suspicious activity patterns to protect you and the integrity of the platform.
• Service improvement: Analysing aggregate usage patterns (not individual) to improve user experience and platform performance.
• Service communications: Sending important notifications related to accounts, transactions, and security updates.
• Marketing (with consent): Sending promotional information and exclusive offers only to players who have given explicit consent.

4Data Sharing with Third Parties

Zalo88 does not sell, rent, or disclose your personal information to third parties without your consent, except in the following situations required for platform operations:

• Payment providers: Transaction data is shared with trusted payment providers (such as FPX and DuitNow) solely to process your deposits and withdrawals.
• Game software providers: Game session information is shared with licensed game providers to ensure smooth and fair gameplay.
• Regulatory body: Zalo88 will disclose information to licensing authorities or law enforcement when required by law or court order.
• Technical service providers: Hosting and IT infrastructure service providers bound by strict confidentiality agreements, with access limited to the minimum data required.
• Independent audit: Compliance verification by independent certification bodies that have signed binding confidentiality agreements.

In the event of a company merger or business acquisition, user information may be transferred as part of the business assets. You will be notified in advance should this occur, and your rights remain fully protected throughout.

5Cookies & Tracking Technologies

Zalo88 uses cookies and similar tracking technologies to enhance your experience on our platform. The following are the types of cookies we use:

• Essential Cookies: Required for core platform operations such as login verification and session security. These cookies cannot be disabled.
• Performance Cookies: Collecting information on how you use the platform to help us improve site functionality and speed.
• Functional Cookies: Saving your preferences such as language, display settings, and game preferences so you don't need to reconfigure them each time.
• Analytical Cookies: Helping us understand aggregate usage patterns (without identifying individuals) for the purpose of continuous service improvement.

You can manage your cookie settings through your internet browser. Please note that disabling certain cookies may affect the functionality of some areas of the Zalo88 platform.

6Data Retention Period

Zalo88 retains your personal data only for as long as necessary for the stated purpose, or as required by applicable law. The table below outlines the retention period for each data category:

Upon expiry of the retention period, your data will be securely deleted or permanently anonymised so that it can no longer be linked back to you.

7Your Rights as a User

As a zalo88 player, you have the following rights regarding your personal data. We respect and facilitate the exercise of each of these rights:

• Right of Access: You have the right to request a copy of all personal data we hold about you in a readable format.
• Right to Rectification: If any information we hold is inaccurate or outdated, you have the right to request an immediate correction.
• Right to Erasure: Under certain circumstances (where there is no legal obligation to retain data), you may request the deletion of your data.
• Right to Restriction of Processing: You may request that we restrict the processing of your data while a dispute is being resolved.
• Right to Data Portability: You have the right to receive your data in a structured format that can be transferred to another platform.
• Right to Object: You may object to the processing of your data for direct marketing purposes at any time without providing a reason.

8Data Security & Protection Measures

Zalo88 continually invests in robust security infrastructure to ensure your personal data remains protected at all times. The technical and organisational security measures we practise include:

• End-to-end 256-bit SSL/TLS encryption for all data communications between you and our servers.
• Encryption of data at rest using AES-256 algorithms for all stored sensitive information.
• Role-based access control (RBAC) ensuring only authorised staff can access data relevant to their responsibilities.
• Two-factor authentication (2FA) is mandatory for all staff access to systems storing player data.
• Round-the-clock security monitoring with advanced intrusion detection and prevention systems (IDS/IPS).
• Periodic penetration testing by independent security experts to identify and address vulnerabilities.
• A comprehensive incident response plan with clear procedures for managing any data breach.

9International Data Transfers

In operating a global platform, your personal data may be processed or stored on servers located outside Malaysia. Zalo88 ensures that any such data transfers are carried out with adequate safeguards, including:

• Binding Data Processing Agreements with all overseas partners.
• Data protection standards compliance at or exceeding the requirements set by Malaysia's PDPA.
• Standard protection mechanisms such as Standard Contractual Clauses (SCC) where applicable.
• Data transfer risk assessments conducted prior to any new data-sharing arrangements.

You may contact us for more information about the specific protection mechanisms used for any international data transfers involving your information.

10Children's Privacy

The zalo88 platform is exclusively for users aged 18 and above. We do not knowingly collect any personal information from individuals under the age of 18. If you believe a child has registered an account or provided us with their information, please contact us immediately and we will take action to delete that information and close the account.

11Changes to This Privacy Policy

Zalo88 reserves the right to update this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or platform service improvements. When we make material changes, we will:

• Updating the "Last Updated" date at the top of this document.
• Displaying clear in-platform notifications and/or sending emails to all registered users.
• Providing at least 7 days' notice before changes take effect, except for changes required immediately due to security or legal reasons.

It is your responsibility to review this Privacy Policy periodically. Continued use of the Zalo88 platform after any changes take effect constitutes your acceptance of the updated policy. If you disagree with any changes, you have the right to close your account and request data deletion in accordance with the procedures set out herein.

12Contact Us Regarding Privacy

If you have any questions, concerns, or requests regarding your privacy and personal data protection, our team is ready to assist. We take every privacy inquiry seriously and are committed to providing accurate and helpful responses.

For any matters relating to this privacy policy, please contact us through the following methods:

• Live Chat: Available on the platform 24 hours a day, 7 days a week — the fastest way to get a response in under a minute.
• Email: [email protected] – for enquiries requiring written documentation. Response within 24 hours on business days.