Industry Standards
to Third Parties
Active Security
Malaysia PDPA
Zplay's Privacy Commitment to Users
Six key pillars that prove zplay is serious about protecting your privacy
Military-Grade Encryption
All data transmitted between your device and zplay servers is protected with 256-bit SSL encryption — the same technology used by financial institutions and major banks worldwide.
Full Data Control in Your Hands
Zplay users have full rights to access, amend, or request deletion of their personal data at any time via account settings or by contacting our support team.
No Sale of Data to Advertisers
Zplay has never and will never sell, rent, or trade users' personal information to advertisers or any third party for marketing purposes without your consent.
Secure Data Storage
All data is stored on servers protected by multi-layered firewalls, strict access controls, and regular security audits. Our servers are actively monitored 24 hours a day, 7 days a week.
Malaysia PDPA Compliance
The zplay privacy policy is designed in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). We ensure every aspect of data handling complies with the legal requirements set by the Malaysian government.
Immediate Breach Notification
In the event of any security incident involving user data, zplay is committed to notifying affected users within the timeframe required by law and taking immediate remediation steps.
This policy was last updated on January 2026 and supersedes all previous versions.
As a trusted online gaming platform, zplay only collects information that is strictly necessary to provide quality, secure services in compliance with legal requirements. We do not collect data that is excessive or irrelevant to our platform's operations.
A. Information You Provide Directly
- Registration information: Full name, date of birth, email address, phone number, and the password you set when registering your zplay account.
- Identity verification documents (KYC): Copies of your identification card (MyKad), passport, bank statements, or other supporting documents required for identity verification to comply with anti-money laundering laws.
- Financial information: Bank account number, bank name, and e-wallet details (such as Touch 'n Go eWallet or GrabPay) required to process deposits and withdrawals.
- Communication with customer support: Chat history, complaints, inquiries, and any communications you have had with the zplay support team via live chat or email.
B. Information Collected Automatically
- Technical data: IP address, browser type, device operating system, screen resolution, and device information used to access the zplay platform.
- Usage data: Pages visited, time spent, games played, betting history, and general platform usage patterns.
- Cookie data: Login session data, user preferences, and analytics data collected via cookies and equivalent technologies.
- Location data: General location information (based on IP address) to ensure compliance with geographic requirements and prevent unauthorized access.
zplay uses collected information for purposes that are clear, lawful, and no broader than necessary. Every use of data has a solid legal basis, whether grounded in contractual agreement, legal obligation, or the platform's legitimate interests.
| Data Usage Purposes | Data Type | Legal Basis |
|---|---|---|
| Account management & login | Name, email, password | Contractual agreement |
| Deposit & withdrawal processing | Financial information | Contractual agreement |
| Identity verification (KYC/AML) | Identity document | Legal obligations |
| Fraud prevention & security | IP, device data, usage patterns | Legitimate interests |
| Customer service communications | Email, phone number | Contractual agreement |
| Analytics & platform improvement | Anonymous usage data | Legitimate interests |
| Promotional communications (with consent) | Email, phone number | User Consent |
zplay does not sell, rent, or disclose your personal information to third parties for marketing purposes. However, in the course of operating the platform, there are specific situations where information must be shared with selected parties that have a legitimate need.
Parties who may receive your information:
- Payment service providers: Trusted payment gateway providers for processing deposit and withdrawal transactions. They receive only the data necessary to complete the relevant transaction.
- Game software providers: Third-party gaming software companies (such as Slots, Live Casino, and Fish Shooting Games providers) that operate games on the zplay platform. Data sharing is limited to technical requirements only.
- Regulatory Authority: Regulatory bodies, law enforcement agencies, or courts when zplay is required to do so under Malaysian law or a valid court order.
- IT and security service providers: Companies providing hosting, security monitoring, and technical support services, bound by strict data confidentiality agreements.
- Professional Consultant: Lawyers, accountants, or auditors who require access to specific information in the context of providing professional advice to zplay, and who are bound by confidentiality obligations.
zplay implements a range of technical and organisational security measures to protect your personal data from unauthorised access, loss, modification, or accidental disclosure. Data security is the highest priority in zplay's operations.
Technical Security Measures:
- Data encryption in transit: All communications are secured with TLS 1.3 protocol and 256-bit SSL encryption, ensuring your data cannot be intercepted during transmission.
- Data encryption at rest: Sensitive data such as passwords and financial information is stored in encrypted form using the latest encryption algorithms.
- Multi-layer firewall: The zplay infrastructure is protected by a sophisticated firewall system and an intrusion detection system (IDS/IPS) that monitors threats in real time.
- Two-factor authentication (2FA): Admin and internal system accounts are protected with two-factor authentication to prevent unauthorized access.
- Regular security audits: Third-party penetration testing and security audits are conducted regularly to identify and address any system vulnerabilities.
Data Retention Period:
Zplay retains your personal data only for as long as necessary to fulfil the purposes stated in this policy, or as required by applicable law. In general:
- Active account data is retained for the duration of account activity and for at least 7 years after account closure to meet financial legal requirements.
- Transaction log data is retained for 7 years for audit and legal compliance purposes.
- Customer support communication data is retained for 3 years.
- Cookie and analytics data is retained for a maximum of 13 months.
zplay uses cookies and equivalent tracking technologies to enhance the user experience, understand how the platform is used, and deliver more relevant content. Cookies are small text files stored on your device when you visit the zplay platform.
Types of Cookies We Use:
- Essential cookies (Strictly Necessary): Required for core platform functions such as login authentication and session security. These cookies cannot be disabled without affecting platform functionality.
- Performance cookies: Collecting information on how users interact with the platform (such as most frequently visited pages) to help us improve the user experience. All data is collected anonymously.
- Functional cookies: Storing user preferences such as preferred language, display settings, and other personal preferences to deliver a more personalized experience.
- Analytics cookies: Used by trusted third-party analytics tools to analyze platform traffic and usage patterns for continuous improvement purposes.
You can manage or disable cookies through your browser settings at any time. Please note, however, that disabling certain cookies may affect the functionality of the zplay platform.
Under Malaysia's Personal Data Protection Act 2010 (PDPA), you as a user zplay have certain rights regarding your personal data. zplay is committed to respecting and facilitating the exercise of these rights.
Right to Access
You have the right to request a copy of the personal data we hold about you. Requests will be processed within 21 business days.
Right to Rectification
You may request correction of inaccurate or incomplete personal data via your account settings or by contacting customer support.
Right to Erasure
You may request deletion of your data, subject to legal requirements that oblige us to retain certain records.
Right to Object
You may object to the processing of your data for direct marketing purposes or based on zplay's legitimate interests.
Right to Data Portability
You have the right to receive your personal data in a machine-readable format for transfer to another service provider.
Right to Restriction of Processing
In certain circumstances, you may request a restriction on data processing while a dispute is being resolved.
zplay is a gaming platform intended for adults aged 18 and above. We do not knowingly collect, store, or process any personal information from minors.
If you are a parent or guardian and believe your child has registered for or used the zplay platform, please contact us immediately via our support email. We will take prompt steps to investigate and delete the account along with all associated data.
In the course of operating the platform, zplay may need to transfer your personal data outside Malaysia, particularly to service providers and technical infrastructure operating in other countries. Any such data transfer will be carried out with adequate safeguards in place.
Zplay ensures that cross-border data transfers only occur to countries or organisations that provide a level of data protection equivalent to or exceeding the standards set by Malaysia's PDPA. This includes:
- Use of approved Standard Contractual Clauses to ensure adequate data protection.
- Verification that data recipients comply with internationally recognized data protection frameworks.
- Legally binding data processing agreements with all parties receiving user data.
zplay reserves the right to amend this Privacy Policy at any time to reflect changes in law, technology, or how we handle data. Any amendments take effect immediately upon publication on this page.
When significant amendments are made, we will:
- Displaying a clear notice on the zplay platform homepage at least 14 days before amendments take effect.
- Sending email notifications to all active registered users.
- Updating the "Last Updated" date at the top of this page.
Your continued use of the zplay platform after any amendments are published constitutes your acceptance of the new terms. If you disagree with any amendment, you have the right to close your account and stop using our services.
If you have any questions, concerns, or complaints regarding this Privacy Policy or how zplay handles your personal data, we encourage you to contact us directly. Our Data Protection Officer (DPO) team is ready to assist.
Available at all times on the platform
If you believe zplay has violated your privacy rights and are unsatisfied with our response, you have the right to file a complaint with the Department of Personal Data Protection Malaysia (JPDP) through their official channels.
Join zplay with Complete Confidence
Your data is protected with the latest technology. Enjoy thousands of slot games, live casino, and fish shooting games in a safe and trusted environment.