Privacy Policy zas36 – Personal Data Protection for Malaysian Players

Zas36 is an online Sports Betting and casino entertainment platform built specifically for users in Malaysia. We understand that the privacy of personal data is a matter of great importance to all our users, and we take this responsibility seriously. This Privacy Policy explains in detail how zas36 collects, uses, stores, protects, and processes the personal data you provide to us when registering and using the platform.

This zas36 Privacy Policy applies to all users of our platform, including registered players, website visitors, and any individual who interacts with zas36's services in any capacity. By registering an account on zas36 or continuing to use our platform, you agree to the data collection and processing practices described in this document.

This policy is written in accordance with Personal Data Protection Act 2010 (PDPA) Malaysia and reflects zas36's commitment to complying with all applicable data protection legal requirements in Malaysia. We review and update this policy periodically to ensure it accurately reflects our current practices and any changes in relevant legislation.

Zas36 collects various types of personal data from our users to enable the platform to operate securely and effectively. The following are the main categories of data we collect:

Identity & Account Data:

• Full name as stated on your MyKad
• Identity card number (MyKad) for KYC identity verification purposes
• Date of birth for minimum age verification (18 years and above)
• Malaysian residential address
• An active Malaysian phone number
• A valid and active email address
• Your chosen username and password (passwords are stored in hashed form and cannot be decoded)

Financial & Transaction Data:

• E-wallet account details (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow) used for deposits and withdrawals
• Malaysian bank account details for FPX transactions via Maybank2u, CIMB Clicks, and other banks
• History of deposits, withdrawals, and winnings on the zas36 platform
• A record of all bets placed, including stakes, markets, and outcomes

Technical & Usage Data:

• IP address and device location information
• Web browser type and operating system used
• Session data including pages visited, time spent, and navigation patterns within the platform
• Device information including unique device identifiers

Zas36 collects your personal data through a variety of transparent methods. We want you to have a clear understanding of how this data collection process works so there are no surprises or confusion.

Directly from You: The majority of the data we collect is provided directly by you during:

• Filling in the new account registration form on the zas36 platform
• Completing the identity verification (KYC) process, including uploading identification documents
• Making a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX
• Contacting the zas36 customer support team via live chat or email
• Completing feedback forms or customer satisfaction surveys
• Participating in zas36 promotions, contests, or loyalty programmes

Automatically: Some data is collected automatically when you use the zas36 platform:

• Cookies and similar tracking technologies used to enhance the user experience
• Server logs that record every request made to zas36's systems
• Analytics data that helps us understand how users interact with the platform

Zas36 uses your personal data exclusively for the purposes stated below. We will not use your data for any other purpose without first obtaining your additional consent.

For notification and promotional purposes, you may withdraw your consent at any time by updating your communication preferences in your zas36 account settings or by contacting us at support@zas36.xyz. Withdrawing consent for marketing communications will not affect the functionality of your account or your betting services.

Zas36 does not sell, rent, or transfer your personal data to any third party for marketing or commercial purposes. This is an unwavering commitment. However, there are limited situations in which we may need to share certain data:

Payment Service Providers: When you make a deposit or withdrawal via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX, the required transaction information is shared with the relevant payment provider solely for the purpose of processing your transaction. These providers are bound by strict confidentiality agreements and may only use your data to process the transaction in question.

Legal Requirements: zas36 may be required to disclose your personal data to the relevant authorities in Malaysia — such as the police, courts, or financial regulators — when mandated by law, court order, or in the context of a legitimate criminal investigation. In such cases, we will endeavour to notify you in advance where permitted by law.

Business Transfer: In the event of a merger, acquisition, or sale of zas36's assets, user data may be transferred as part of those business assets. You will be notified of any such changes and of your right to object to the transfer of your data.

Zas36 continuously invests in the latest security technologies and procedures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The following are the key security measures we have in place:

• 256-bit SSL Encryption: All communications between your web browser or app and zas36's servers are protected by 256-bit SSL encryption. This means that any data transmitted cannot be read by any party attempting to intercept your connection.
• Stored Data Encryption: Sensitive data such as payment information and identity documents are stored in encrypted form on our servers. Even if someone were to gain physical access to the servers, this data cannot be read without the correct encryption key.
• Layered Access Controls: Only zas36 staff with a legitimate operational need are granted access to user data, and all such access is monitored and audited on a regular basis.
• 24/7 Security Monitoring: zas36's cybersecurity team continuously monitors the platform to detect any unauthorised access attempts, cyberattacks, or suspicious activity.
• Periodic Security Audits: zas36 conducts regular penetration testing and independent security audits to identify and address any vulnerabilities before they can be exploited.
• Two-Factor Authentication (2FA): The 2FA system is available and encouraged for all zas36 accounts to provide an additional layer of protection beyond your password.

While we take all reasonable steps to protect your data, no digital security system can be guaranteed 100% secure. In the event of any data breach involving your personal information, zas36 will notify you and the relevant authorities within the timeframe required under applicable Malaysian law.

The zas36 platform uses cookies and similar tracking technologies to enhance the user experience and ensure the platform operates correctly. Cookies are small text files stored in your web browser when you visit our website.

Types of Cookies Used by zas36:

• Essential Cookies: Required for core platform functionality, including login authentication, session management, and security. These cookies cannot be disabled as the platform will not function without them.
• Functional Cookies: Stores your preferences such as language (Bahasa Melayu), display settings, and saved login details for your convenience. Can be disabled, though doing so may reduce your overall experience on the platform.
• Analytics Cookies: Collecting anonymised usage data to help us understand how users interact with the zas36 platform and identify areas for improvement.
• Session Cookies: Temporary cookies that are automatically deleted when you close your web browser. Used to maintain your active session while using the platform.

You can manage or disable cookies through your web browser settings at any time. Please note that disabling certain cookies may affect the functionality and your overall experience on the zas36 platform.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have a range of rights regarding the personal data zas36 holds about you. zas36 respects and facilitates the exercise of all these rights:

• Right to Access: You have the right to request and receive a copy of the personal data we hold about you. zas36 will provide this information in a readable format within 21 business days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate, incomplete, or out of date, you have the right to request an immediate correction. You may also update much of your profile information directly through your account settings on the zas36 platform.
• Right to Erasure: Under certain circumstances, you have the right to request the deletion of your personal data from zas36's systems. Please note that some data may need to be retained to fulfil legal obligations or active contractual requirements.
• Right to Object to Processing: You have the right to object to the processing of your personal data for direct marketing purposes at any time. Once you object, zas36 will immediately cease using your data for that purpose.
• Right to Restriction of Processing: In certain circumstances, you may request that zas36 restrict how we process your data — for example, while you are disputing the accuracy of the data or objecting to its processing.

To exercise any of the rights above, please contact our privacy team by email at support@zas36.xyz, stating the right you wish to exercise along with any relevant information. We will respond within 14 business days and resolve your request within the timeframe prescribed by law.

The zas36 platform is exclusively for individuals aged 18 years of age and above. zas36 does not knowingly collect any personal data from individuals under the age of 18. All new account applicants are required to confirm that they are at least 18 years old at the point of registration, and zas36 conducts strict age checks as part of our KYC process.

Should zas36 discover or become aware that we have collected data from an individual under the age of 18, we will immediately take the following steps:

• Closing the associated account immediately
• Permanently deleting all personal data associated with the individual from our systems
• Processing the return of any remaining funds held in the account
• Reporting incidents to the relevant authorities where required

If you know or suspect that someone under the age of 18 has registered for or is using the zas36 platform, please notify us immediately at support@zas36.xyz so that prompt action can be taken. zas36 takes the protection of young Malaysians very seriously.

Zas36 retains your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required under applicable Malaysian law. The following guidelines govern our data retention periods:

• Active Account Data: Retained for the duration that your account remains active on the zas36 platform, and for a reasonable period after account closure to allow for the resolution of any claims or disputes that may arise.
• Financial Transaction Records: Retained for a minimum of seven years in compliance with Malaysian tax and financial regulatory requirements, even after a user's account has been closed.
• KYC Verification Documents: Retained for a minimum of five years following account closure, in line with Malaysia's anti-money laundering (AML) requirements.
• Support Communication Logs: Retained for two years to allow for reference if required.
• Anonymous Analytics Data: May be retained for a longer period as it contains no information that can identify an individual.

Once the applicable retention period expires, your data will be securely deleted from zas36's systems or converted into an anonymised format that cannot be linked back to you.

Zas36 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. We are committed to keeping you informed of any significant changes.

When material changes are made to this Privacy Policy, zas36 will:

• Publishing the latest version on zas36.xyz with the amendment date clearly stated
• Sending a notification to your registered email address where the changes made are material and significantly affect your rights
• Displaying a notice on the zas36 platform for a reasonable period after the amendment takes effect

Your continued use of the zas36 platform after any amendments to the Privacy Policy take effect constitutes your acceptance of the updated policy. It is your responsibility to review this Privacy Policy periodically. If you do not agree with any amendments, please discontinue use of the platform and contact us to close your account.

If you have any questions, concerns, or complaints regarding how zas36 handles your personal data, or if you wish to exercise any of your rights under Malaysia's PDPA, please reach out to our team. We are committed to responding to all privacy-related enquiries within a reasonable timeframe.

Ways to reach us regarding data privacy:

• Email: support@zas36.xyz — include "Privacy Enquiry" in your email subject line
• Live Chat: Available on the zas36 platform 24 hours a day, 7 days a week in Bahasa Melayu

When contacting us regarding privacy matters, please include the following information to help us process your request more quickly:

• Your full name and zas36 account number
• Type of request (access, correction, deletion, objection, etc.)
• Specific details of the data or processing you are enquiring about

The zas36 team will verify your identity before processing any data-related request, ensuring that only the legitimate account holder may exercise these rights. We will provide an initial response within three business days and resolve requests within the timeframe stipulated by the Malaysia PDPA.