Zona66 Privacy Policy – Player Data Protection in Malaysia

This Privacy Policy explains how Zona66 ("we", "Platform") collects, uses, discloses, and protects your personal information ("Player", "you") when you use our website, mobile app, and all our services.

Zona66 operates with full responsibility towards player data. We comply with applicable data protection laws and uphold international privacy principles. Every decision regarding our data processing is made with player interests and safety as the top priority.

By registering an account or using any Zona66 service, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read together with Terms and Conditions of ours that forms the entire agreement between you and zona66.

We believe transparency is the foundation of trust. That is why we provide this document in plain, easy-to-understand language, free of confusing legal jargon – so every Malaysian player knows exactly how their data is managed.

Zona66 collects two main categories of information: data you provide directly to us, and data collected automatically when you use our platform.

We only collect data that is genuinely necessary to provide our services. We do not collect sensitive information such as biometric data or health information unless there is a specific legal requirement to do so.

The data we collect is used for clear and lawful purposes. We will not use your information for unrelated purposes without obtaining your consent first.

• Account management: Securely creating, verifying, and managing your player account.
• Transaction processing: Processing deposits, withdrawals, and all financial transactions quickly and accurately.
• KYC verification: Meeting legal requirements for identity verification and anti-money laundering (AML) compliance.
• Service improvement: Analyzing usage patterns to improve the gaming experience, platform speed, and game selection.
• Platform security: Detecting and preventing fraud, unauthorized access, and suspicious activity.
• Service communications: Sending important notifications related to your account, transactions, and policy updates.
• Responsible gaming: Monitoring gameplay patterns to identify players who may need responsible gaming support.
• Marketing (with consent): Sending promotional offers and bonus information – only to players who have given their consent.

Every data processing activity by zona66 has a valid legal basis, whether based on contractual fulfillment, legal obligation, legitimate interest, or consent you have provided.

Zona66 does not sell player personal data to any third party for marketing or commercial purposes. Your data may be shared only in limited situations as outlined below:

• Payment service providers: Transaction details required to process deposits and withdrawals are shared only with verified, regulated payment gateway providers.
• Game software providers: Minimal game data required is shared with providers such as Pragmatic Play, Evolution Gaming, and others to operate games properly.
• Regulatory authority: We comply with all lawful information requests from regulatory bodies, tax authorities, and law enforcement agencies as required by law.
• Independent auditors: Appointed third-party auditors may access data required for security and compliance audit purposes.
• Analytics partners: Anonymised usage data (non-personally identifiable) may be shared with analytics tools to help us understand platform usage patterns.

All third parties that receive zona66 player data are bound by strict confidentiality agreements and are required to protect your data to standards equal to or exceeding our own.

Zona66 invests seriously in cybersecurity infrastructure to ensure player data is always protected. We employ a layered protection approach encompassing technology, processes, and staff training.

• 256-bit SSL encryption: All data transmitted between your device and zona66's servers is encrypted to the highest encryption standards.
• Stored data encryption: Sensitive data such as financial information and identity documents is stored in encrypted form within our database.
• Strict access controls: Only staff with specific authorisation may access player data, and every access is recorded in the system log.
• 24/7 monitoring: Our security systems continuously monitor for cyber threats and respond immediately to any unusual activity.
• Penetration testing: Security audits and penetration testing are conducted regularly by independent third-party experts.
• Two-factor verification: Players are encouraged to enable 2FA to add an extra layer of protection to their account.

While we take all reasonable precautions, no security system can be guaranteed 100% safe. In the event of a data breach affecting your information, we will notify you within 72 hours of becoming aware of the incident.

Zona66 uses cookies and similar tracking technologies to enhance user experience, analyse website traffic, and deliver more relevant content to you.

• Essential Cookies: Required for core platform operations such as login session management and security. These cookies cannot be disabled.
• Functional Cookies: Saving your preferences such as language, display theme, and account settings so you never have to reconfigure them.
• Analytics Cookies: Helping us understand how players use the platform – which pages are popular, how long sessions last, and more.
• Marketing Cookies: Used to display relevant ads and promotions. This type of cookie is only active if you have given your consent.

You can manage cookie settings through your web browser at any time. Please note that disabling certain cookies may affect platform functionality. For more information on managing cookies, refer to your web browser's help section.

Zona66 recognises and respects your rights regarding personal data. You have the following rights, which you may exercise at any time:

To exercise any of the above rights, contact our customer support team via live chat. We will respond within 30 calendar days from the date your request is received.

Zona66 retains your personal data only for as long as necessary for the purposes stated in this Privacy Policy or to fulfil applicable legal requirements.

• Active account data: Retained for as long as your account remains active and for the required period following account closure.
• Financial transaction records: Retained for a minimum of 7 years in accordance with accounting and tax legal requirements.
• KYC documents: Retained for a minimum of 5 years after account closure in accordance with AML requirements.
• Support communication logs: Retained for 2 years for quality control and dispute resolution purposes.
• Analytics data: Anonymised data is retained for a longer period for platform improvement purposes.

When data is no longer needed and there is no legal obligation to retain it, Zona66 will ensure it is securely deleted or disposed of using recognised methods.

Zona66 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, legal requirements, or service improvements.

Any significant changes to this Privacy Policy will be communicated to players through:

• In-platform notification upon your next login.
• An email will be sent to your registered address at least 14 days before any changes take effect.
• Updates take effect on the "Last Updated" date shown at the top of this document.

Continued use of the zona66 platform after a policy change takes effect constitutes your acceptance of the updated Privacy Policy. If you disagree with the changes, you have the right to close your account before they take effect.

If you have any questions, concerns, or requests regarding your privacy and personal data protection, our team is ready to assist you at any time.

You may contact Zona66's Data Protection Officer (DPO) via the platform's 24/7 live chat. Our team will respond within 24–48 hours for privacy-related enquiries.